CVE Tools
Track your stack

Cerberus

12 CVEs tracked since 2005. Since Jun 2005, none of them reached CISA KEV.

Cerberus CVEs per month

Jun 2005 to Mar 2009. Point at a month, or focus the strip and use the arrow keys.
Cerberus CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2005-0620
2005-07null or fewer
2005-08null or fewer
2005-09null or fewer
2005-10null or fewer
2005-1110
2005-1220
2006-01null or fewer
2006-0210
2006-03null or fewer
2006-04null or fewer
2006-05null or fewer
2006-06null or fewer
2006-07null or fewer
2006-08null or fewer
2006-0910
2006-1010
2006-11null or fewer
2006-1210
2007-01null or fewer
2007-02null or fewer
2007-03null or fewer
2007-04null or fewer
2007-05null or fewer
2007-06null or fewer
2007-07null or fewer
2007-08null or fewer
2007-09null or fewer
2007-1010
2007-1110
2007-12null or fewer
2008-01null or fewer
2008-02null or fewer
2008-03null or fewer
2008-04null or fewer
2008-05null or fewer
2008-06null or fewer
2008-07null or fewer
2008-08null or fewer
2008-09null or fewer
2008-10null or fewer
2008-11null or fewer
2008-12null or fewer
2009-01null or fewer
2009-02null or fewer
2009-0310

Products

The products that kept showing up in Cerberus's monthly top three, with their CVEs summed over those months.

  1. Cerberus Helpdesk97 months
  2. Ftp Server22 months
  3. Helpdesk11 month

Latest CVEs

The 14 most recently published vulnerabilities affecting Cerberus.

  1. CVE-2026-6265Local Privilege Escalation in Cerberus FTP Server =< 2025.4.28.8
  2. CVE-2017-6880Buffer overflow in Cerberus FTP Server 8.0.10.3 allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a long MLST command.9.8
  3. CVE-2008-6440Cerberus Helpdesk before 4.0 (Build 600) allows remote attackers to obtain sensitive information via direct requests for "controllers ... that aren't standard helpdesk pages," possibly involving th...5.0
  4. CVE-2007-5930Cross-site scripting (XSS) vulnerability in the web interface in Cerberus FTP Server before 2.46 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.4.3
  5. CVE-2003-1476Cerberus FTP Server 2.1 stores usernames and passwords in plaintext, which could allow local users to gain access.2.1
  6. CVE-2006-6366Cross-site scripting (XSS) vulnerability in includes/elements/spellcheck/spellwin.php in Cerberus Helpdesk 0.97.3, 2.0 through 2.7, 3.2.1, and 3.3 allows remote attackers to inject arbitrary web sc...6.8
  7. CVE-2006-5428rpc.php in Cerberus Helpdesk 3.2.1 does not verify a client's privileges for a display_get_requesters operation, which allows remote attackers to bypass the GUI login and obtain sensitive informati...5.0
  8. CVE-2006-4539(1) includes/widgets/module_company_tickets.php and (2) includes/widgets/module_track_tickets.php Client Support Center in Cerberus Helpdesk 3.2 Build 317, and possibly earlier, allows remote attac...7.5
  9. CVE-2006-0509Multiple cross-site scripting (XSS) vulnerabilities in clients.php in Cerberus Helpdesk, possibly 2.7, allow remote attackers to inject arbitrary web script or HTML via (1) the contact_search param...4.3
  10. CVE-2005-4428Cross-site scripting (XSS) vulnerability in index.php in Cerberus Helpdesk allows remote attackers to inject arbitrary web script or HTML via the kb_ask parameter.4.3
  11. CVE-2005-4427Multiple SQL injection vulnerabilities in Cerberus Helpdesk allow remote attackers to execute arbitrary SQL commands via the (1) file_id parameter to attachment_send.php, (2) the $addy variable in ...7.5
  12. CVE-2005-3502attachment_send.php in Cerberus Helpdesk allows remote attackers to view attachments and tickets of other users via a modified file_id parameter.5.0
  13. CVE-2005-1963Cerberus Helpdesk 0.97.3 allows remote attackers to obtain sensitive information via certain requests to (1) reports.php, (2) knowledgebase.php, or (3) configuration.php, which leaks the informatio...5.0
  14. CVE-2005-1962Cross-site scripting (XSS) vulnerability in Cerberus Helpdesk 0.97.3 allows remote attackers to inject arbitrary web script or HTML via the (1) errorcode parameter to index.php or (2) certain field...4.3

The record

Peak rank
#58 in Jun 2005
Busiest month shown
Jun 2005, 2 CVEs
Months with a KEV entry
0 since Jun 2005
Monthly snapshots
10 since 2005
Cerberus's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store