Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2016-05-14	CVE-2016-2296	7PK - Security Features vulnerability in Meteocontrol products Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require authentication for "post-admin" login pages, which allows remote attackers to obtain sensitive information or modify data via unspecified vectors. network low complexity meteocontrol CWE-254 critical	9.4
2016-05-14	CVE-2016-2297	Unspecified vulnerability in Meteocontrol products Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to execute arbitrary commands via an "access command shell-like feature." network low complexity meteocontrol critical	9.4
2016-05-14	CVE-2016-2298	Information Exposure vulnerability in Meteocontrol products Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to obtain sensitive cleartext information via unspecified vectors. network low complexity meteocontrol CWE-200 critical	9.8