https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2014-0605.htmlhttps://patchthecve.com/cve/CVE-2014-0605.htmlWed, 17 Jun 2026 00:03:21 +0000HIGH 10.0: Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to the SaveSettings method.https://patchthecve.com/cve/CVE-2014-0604.htmlhttps://patchthecve.com/cve/CVE-2014-0604.htmlWed, 17 Jun 2026 00:03:21 +0000HIGH 10.0: Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to the StartLog method.https://patchthecve.com/cve/CVE-2014-0603.htmlhttps://patchthecve.com/cve/CVE-2014-0603.htmlWed, 17 Jun 2026 00:03:21 +0000HIGH 10.0: The rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to cause a denial of service (memory corruption) and execute arbitrary code via vectors related to the (1) GetGlobalSettings or (2) GetSiteProperties3 methods, which triggers a dereference of https://patchthecve.com/cve/CVE-2014-5211.htmlhttps://patchthecve.com/cve/CVE-2014-5211.htmlWed, 17 Jun 2026 00:11:13 +0000MEDIUM 6.8: Stack-based buffer overflow in the Attachmate Reflection FTP Client before 14.1.433 allows remote FTP servers to execute arbitrary code via a large PWD response.https://patchthecve.com/cve/CVE-2014-0607.htmlhttps://patchthecve.com/cve/CVE-2014-0607.htmlWed, 17 Jun 2026 00:03:21 +0000HIGH 10.0: Unrestricted file upload vulnerability in Attachmate Verastream Process Designer (VPD) before R6 SP1 Hotfix 1 allows remote attackers to execute arbitrary code by uploading and launching an executable file.https://patchthecve.com/cve/CVE-2013-3626.htmlhttps://patchthecve.com/cve/CVE-2013-3626.htmlTue, 16 Jun 2026 23:55:31 +0000HIGH 9.3: Directory traversal vulnerability in the Session Server in Attachmate Verastream Host Integrator (VHI) 6.0 through 7.5 SP 1 HF 1 allows remote attackers to upload and execute arbitrary files via a crafted message.https://patchthecve.com/cve/CVE-2011-5157.htmlhttps://patchthecve.com/cve/CVE-2011-5157.htmlTue, 16 Jun 2026 23:36:03 +0000MEDIUM 6.9: Untrusted search path vulnerability in Attachmate Reflection before 14.1 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, a related issue to CVE-2011-0107. NOTE: some of these details are obtained from third party information.