Vulnerabilities > Parallels > Parallels Plesk Small Business Panel > Critical
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2011-12-16 | CVE-2011-4755 | Improper Input Validation vulnerability in Parallels Plesk Small Business Panel 10.2.0 Parallels Plesk Small Business Panel 10.2.0 does not properly validate string data that is intended for storage in an XML document, which allows remote attackers to cause a denial of service (parsing error) or possibly have unspecified other impact via a crafted cookie, as demonstrated by cookies to client@1/domain@1/hosting/file-manager/ and certain other files. | 10.0 |
| 2011-12-16 | CVE-2011-4757 | Credentials Management vulnerability in Parallels Plesk Small Business Panel 10.2.0 Parallels Plesk Small Business Panel 10.2.0 generates a password form field without disabling the autocomplete feature, which makes it easier for remote attackers to bypass authentication by leveraging an unattended workstation, as demonstrated by forms in smb/auth and certain other files. | 10.0 |
| 2011-12-16 | CVE-2011-4761 | Unspecified vulnerability in Parallels Plesk Small Business Panel 10.2.0 Parallels Plesk Small Business Panel 10.2.0 omits the Content-Type header's charset parameter for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving domains/sitebuilder_edit.php and certain other files. | 10.0 |
| 2011-12-16 | CVE-2011-4762 | Unspecified vulnerability in Parallels Plesk Small Business Panel 10.2.0 Parallels Plesk Small Business Panel 10.2.0 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving smb/app/top-categories-data/ and certain other files. | 10.0 |
| 2011-12-16 | CVE-2011-4768 | Unspecified vulnerability in Parallels Plesk Small Business Panel 10.2.0 The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 omits the Content-Type header's charset parameter for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving Wizard/Edit/Modules/Image and certain other files. | 10.0 |