Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2012-11-04	CVE-2012-5816	Improper Input Validation vulnerability in AOL AIM 1.0.1.2 AOL Instant Messenger (AIM) 1.0.1.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. network aol CWE-20	5.8
2010-06-17	CVE-2010-1374	Path Traversal vulnerability in Apple mac OS X and mac OS X Server Directory traversal vulnerability in iChat in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, when AIM is used, allows remote attackers to create arbitrary files via directory traversal sequences in an inline image-transfer operation. network apple aol CWE-22	4.3