web/security: add CVE-2012-6617 / CVE-2012-6618
web/security: remove "minor"

no other CVE entries list any information about what is minor and what not