3.0.3

DATE	CVE	VULNERABILITY TITLE	RISK
2014-12-03	CVE-2014-9220	SQL Injection vulnerability in multiple products SQL injection vulnerability in OpenVAS Manager before 4.0.6 and 5.x before 5.0.7 allows remote attackers to execute arbitrary SQL commands via the timezone parameter in a modify_schedule OMP command. network low complexity fedoraproject openvas opensuse CWE-89	7.5
2014-05-19	CVE-2013-6765	Improper Authentication vulnerability in Openvas Manager OpenVAS Manager 3.0 before 3.0.7 and 4.0 before 4.0.4 allows remote attackers to bypass the OMP authentication restrictions and execute OMP commands via a crafted OMP request for version information, which causes the state to be set to CLIENT_AUTHENTIC, as demonstrated by the omp_xml_handle_end_element function in omp.c. network low complexity openvas CWE-287	7.5
2012-11-26	CVE-2012-5520	Improper Input Validation vulnerability in Openvas Manager The send_to_sourcefire function in manage_sql.c in OpenVAS Manager 3.x before 3.0.4 allows remote attackers to execute arbitrary commands via the (1) IP address or (2) port number field in an OMP request. network low complexity openvas CWE-20	7.5