7.13

DATE	CVE	VULNERABILITY TITLE	RISK
2012-10-01	CVE-2012-1588	Resource Management Errors vulnerability in Drupal Algorithmic complexity vulnerability in the _filter_url function in the text filtering system (modules/filter/filter.module) in Drupal 7.x before 7.14 allows remote authenticated users with certain roles to cause a denial of service (CPU consumption) via a long email address. network drupal CWE-399	3.5
2012-05-21	CVE-2012-2922	Information Exposure vulnerability in Drupal The request_path function in includes/bootstrap.inc in Drupal 7.14 and earlier allows remote attackers to obtain sensitive information via the q[] parameter to index.php, which reveals the installation path in an error message. network low complexity drupal CWE-200	5.0