7.0.0

DATE	CVE	VULNERABILITY TITLE	RISK
2018-04-11	CVE-2017-18260	SQL Injection vulnerability in Dolibarr Erp/Crm Dolibarr ERP/CRM is affected by multiple SQL injection vulnerabilities in versions through 7.0.0 via comm/propal/list.php (viewstatut parameter) or comm/propal/list.php (propal_statut parameter, aka search_statut parameter). network low complexity dolibarr CWE-89	8.8
2018-04-11	CVE-2017-18259	Cross-site Scripting vulnerability in Dolibarr Erp/Crm Dolibarr ERP/CRM is affected by stored Cross-Site Scripting (XSS) in versions through 7.0.0. network low complexity dolibarr CWE-79	5.4