Trend Micro Control Manager — known CVE vulnerabilities

Every CVE whose affected-product data names Trend Micro Control Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2011-5001 — CVSS 10.0 (critical): Stack-based buffer overflow in the CGenericScheduler::AddTask function in cmdHandlerRedAlertController.dll in CmdProcessor.exe in Trend…
• CVE-2007-0851 — CVSS 9.3 (critical): Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber…
• CVE-2005-0383 — CVSS 7.5 (high): Trend Micro Control Manager 3.0 Enterprise Edition allows remote attackers to gain privileges via a replay attack of the encrypted username…
• CVE-2005-0533 — CVSS 7.5 (high): Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI before 7.510, as used in multiple Trend Micro products, allows remote…
• CVE-2012-2998 — CVSS 7.5 (high): SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager (TMCM) before 5.5.0.1823 and 6.0 before 6.0.0.1449…
• CVE-2006-3261 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in Trend Micro Control Manager (TMCM) 3.5 allows remote attackers to inject arbitrary web script…