https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2011-3685.htmlhttps://patchthecve.com/cve/CVE-2011-3685.htmlTue, 16 Jun 2026 23:33:44 +0000LOW 1.9: Tembria Server Monitor before 6.0.5 Build 2252 uses a substitution cipher to encrypt application credentials, which allows local users to obtain sensitive information by leveraging read access to (1) authentication.dat or (2) XML files in the Exports directory.https://patchthecve.com/cve/CVE-2011-3684.htmlhttps://patchthecve.com/cve/CVE-2011-3684.htmlTue, 16 Jun 2026 23:33:44 +0000MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in Tembria Server Monitor before 6.0.5 Build 2252 allow remote attackers to inject arbitrary web script or HTML via (1) the siteid parameter to logbook.asp, (2) the siteid parameter to monitor-events.asp, (3) the siteid parameter to reports-config-https://patchthecve.com/cve/CVE-2010-1316.htmlhttps://patchthecve.com/cve/CVE-2010-1316.htmlTue, 16 Jun 2026 23:18:06 +0000MEDIUM 5.0: Multiple stack-based buffer overflows in Tembria Server Monitor before 5.6.1 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted (1) GET, (2) PUT, or (3) HEAD request, as demonstrated by a malformed GET request containing a long PATH_IN