rainbutterfly/cve_corpus huggingface dataset:
CVE-2012-2915 
Stack-based buffer overflow in Lattice Semiconductor PAC-Designer 6.2.1344 allows remote attackers to execute arbitrary code via a long string in a Value tag in a SymbolicSchematicData definition tag in PAC Design (.pac) file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-21T18:00:00.000Z
CVE-2012-2916 
Cross-site scripting (XSS) vulnerability in sabre_class_admin.php in the SABRE plugin before 2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the active_option parameter to wp-admin/tools.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-21T18:00:00.000Z
CVE-2012-2917 
Cross-site scripting (XSS) vulnerability in the Share and Follow plugin 1.80.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the CDN API Key (cnd-key) in a share-and-follow-menu page to wp-admin/admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-21T18:00:00.000Z
CVE-2012-2918 
Cross-site scripting (XSS) vulnerability in Upload/engine.php in Chevereto 1.91 allows remote attackers to inject arbitrary web script or HTML via the v parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-21T22:00:00.000Z
CVE-2012-2919 
Directory traversal vulnerability in Upload/engine.php in Chevereto 1.9.1 allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) in the v parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-21T22:00:00.000Z
CVE-2012-2920 
Cross-site scripting (XSS) vulnerability in the userphoto_options_page function in user-photo.php in the User Photo plugin before 0.9.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to wp-admin/options-general.php.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-21T22:00:00.000Z
CVE-2012-2921 
Universal Feed Parser (aka feedparser or python-feedparser) before 5.1.2 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML ENTITY declaration in a non-ASCII encoded document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-21T22:00:00.000Z
CVE-2012-2922 
The request_path function in includes/bootstrap.inc in Drupal 7.14 and earlier allows remote attackers to obtain sensitive information via the q[] parameter to index.php, which reveals the installation path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-21T22:00:00.000Z
CVE-2012-2923 
SQL injection vulnerability in news.php4 in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary SQL commands via the nid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-21T22:00:00.000Z
CVE-2012-2924 
PHP remote file inclusion vulnerability in admin/setup.inc.php in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-21T22:00:00.000Z
CVE-2012-2925 
SQL injection vulnerability in engine.php in Simple PHP Agenda 2.2.8 allows remote attackers to execute arbitrary SQL commands via the priority parameter in an addTodo action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-21T22:00:00.000Z
CVE-2012-2926 
Atlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 before 4.0.7, and 4.1 before 4.1.10; FishEye and Crucible before 2.5.8, 2.6 before 2.6.8, and 2.7 before 2.7.12; Bamboo before 3.3.4 and 3.4.x before 3.4.5; and Crowd before 2.0.9, 2.1 before 2.1.2, 2.2 before 2.2.9, 2.3 before 2.3.7, and 2.4 before 2.4.1 do not properly restrict the capabilities of third-party XML parsers, which allows remote attackers to read arbitrary files or cause a denial of service (resource consumption) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-22T15:00:00.000Z
CVE-2012-2927 
The TM Software Tempo plugin before 6.4.3.1, 6.5.x before 6.5.0.2, and 7.x before 7.0.3 for Atlassian JIRA does not properly restrict the capabilities of third-party XML parsers, which allows remote authenticated users to cause a denial of service (resource consumption) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-22T15:00:00.000Z
CVE-2012-2928 
The Gliffy plugin before 3.7.1 for Atlassian JIRA, and before 4.2 for Atlassian Confluence, does not properly restrict the capabilities of third-party XML parsers, which allows remote attackers to read arbitrary files or cause a denial of service (resource consumption) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-22T15:00:00.000Z
CVE-2012-2930 
Multiple cross-site request forgery (CSRF) vulnerabilities in TinyWebGallery (TWG) before 1.8.8 allow remote attackers to hijack the authentication of administrators for requests that (1) add a user via an adduser action to admin/index.php or (2) conduct static PHP code injection attacks in .htusers.php via the user parameter to admin/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-24T14:00:00.000Z
CVE-2012-2931 
PHP code injection in TinyWebGallery before 1.8.8 allows remote authenticated users with admin privileges to inject arbitrary code into the .htusers.php file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-09T20:56:12.000Z
CVE-2012-2932 
Multiple cross-site scripting (XSS) vulnerabilities in TinyWebGallery (TWG) before 1.8.8 allow remote attackers to inject arbitrary web script or HTML via the selitems[] parameter in a (1) copy, (2) chmod, or (3) arch action to admin/index.php or (4) searchitem parameter in a search action to admin/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-24T14:00:00.000Z
CVE-2012-2934 
Xen 4.0, and 4.1, when running a 64-bit PV guest on "older" AMD CPUs, does not properly protect against a certain AMD processor bug, which allows local guest OS users to cause a denial of service (host hang) via sequential execution of instructions across a non-canonical boundary, a different vulnerability than CVE-2012-0217.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-12-03T21:00:00.000Z
CVE-2012-2935 
Cross-site scripting (XSS) vulnerability in osCommerce/OM/Core/Site/Shop/Application/Checkout/pages/main.php in OSCommerce Online Merchant 3.0.2 allows remote attackers to inject arbitrary web script or HTML via the value_title parameter, a different vulnerability than CVE-2012-1059.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-27T19:00:00.000Z
CVE-2012-2936 
Multiple cross-site scripting (XSS) vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) page parameter to (a) admin/admin_comments.php or (b) admin/admin_links.php; or list parameter in a (3) move or (4) minimize action to (c) admin/admin_index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-27T20:00:00.000Z
CVE-2012-2937 
Multiple SQL injection vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) list parameter in a move action to admin/admin_index.php, (2) display parameter in a minimize action to admin/admin_index.php, (3) enabled[] parameter to admin/admin_users.php, or (4) msg_id to the module.php in the simple_messaging module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-27T20:00:00.000Z
CVE-2012-2938 
Multiple cross-site scripting (XSS) vulnerabilities in Travelon Express 6.2.2 allow remote attackers to inject arbitrary web script or HTML via the holiday name field to (1) holiday_add.php or (2) holiday_view.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-27T20:00:00.000Z
CVE-2012-2939 
Multiple unrestricted file upload vulnerabilities in Travelon Express 6.2.2 allow remote authenticated users to execute arbitrary code by uploading a file with an executable extension using (1) airline-edit.php, (2) hotel-image-add.php, or (3) hotel-add.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-27T20:00:00.000Z
CVE-2012-2940 
MediaChance Real-DRAW PRO 5.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted (1) PNG, (2) WMF, (3) PSD, (4) TGA, (5) TTF, (6) BMP, (7) TIFF, or (8) PCX file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-27T20:00:00.000Z
CVE-2012-2941 
Cross-site scripting (XSS) vulnerability in search/ in Yandex.Server 2010 9.0 Enterprise allows remote attackers to inject arbitrary web script or HTML via the text parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-27T20:00:00.000Z
CVE-2012-2942 
Buffer overflow in the trash buffer in the header capture functionality in HAProxy before 1.4.21, when global.tune.bufsize is set to a value greater than the default and header rewriting is enabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-27T20:00:00.000Z
CVE-2012-2943 
CRLF injection vulnerability in cryptographp.inc.php in Cryptographp allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the cfg parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-27T20:00:00.000Z
CVE-2012-2944 
Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools (NUT) before 2.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (electric-power outage) via a long string containing non-printable characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-01T20:00:00.000Z
CVE-2012-2945 
Hadoop 1.0.3 contains a symlink vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-28T20:31:27.000Z
CVE-2012-2947 
chan_iax2.c in the IAX2 channel driver in Certified Asterisk 1.8.11-cert before 1.8.11-cert2 and Asterisk Open Source 1.8.x before 1.8.12.1 and 10.x before 10.4.1, when a certain mohinterpret setting is enabled, allows remote attackers to cause a denial of service (daemon crash) by placing a call on hold.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-02T15:00:00.000Z
CVE-2012-2948 
chan_skinny.c in the Skinny (aka SCCP) channel driver in Certified Asterisk 1.8.11-cert before 1.8.11-cert2 and Asterisk Open Source 1.8.x before 1.8.12.1 and 10.x before 10.4.1 allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by closing a connection in off-hook mode.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-02T15:00:00.000Z
CVE-2012-2949 
The ZTE sync_agent program for Android 2.3.4 on the Score M device uses a hardcoded ztex1609523 password to control access to commands, which allows remote attackers to gain privileges via a crafted application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-29T19:00:00.000Z
CVE-2012-2950 
Gateway Geomatics MapServer for Windows before 3.0.6 contains a Local File Include Vulnerability which allows remote attackers to execute local PHP code and obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-09T21:08:10.000Z
CVE-2012-2952 
SQL injection vulnerability in add_ons.php in Jaow 2.4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the add_ons parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-29T20:00:00.000Z
CVE-2012-2953 
The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary commands via crafted input to application scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-23T17:00:00.000Z
CVE-2012-2955 
Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in IBM Lotus Protector for Mail Security 2.1, 2.5, 2.5.1, and 2.8 and IBM ISS Proventia Network Mail Security System allow remote attackers to inject arbitrary web script or HTML via the query string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-20T10:00:00.000Z
CVE-2012-2956 
SQL injection vulnerability in SpiceWorks 5.3.75941 allows remote authenticated users to execute arbitrary SQL commands via the id parameter to api_v2.json.  NOTE: this entry was SPLIT per ADT2 due to different vulnerability types. CVE-2012-6658 is for the XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-09-17T15:00:00.000Z
CVE-2012-2957 
The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows local users to gain privileges by modifying files, related to a "file inclusion" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-23T17:00:00.000Z
CVE-2012-2959 
Cross-site request forgery (CSRF) vulnerability in password-manager/changePasswords.do in BMC Identity Management Suite 7.5.00.103 allows remote attackers to hijack the authentication of administrators for requests that change passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-11T23:00:00.000Z
CVE-2012-2960 
Cross-site scripting (XSS) vulnerability in the import functionality in HP ArcSight Connector appliance 6.2.0.6244.0 and ArcSight Logger appliance 5.2.0.6288.0 allows remote attackers to inject arbitrary web script or HTML via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-08T10:00:00.000Z
CVE-2012-2961 
SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-23T17:00:00.000Z
CVE-2012-2962 
SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.2 allows remote authenticated users to execute arbitrary SQL commands via the q parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-30T22:00:00.000Z
CVE-2012-2963 
The administrative interface in the embedded web server on the BreakingPoint Storm appliance before 3.0 does not require authentication for the gwt/BugReport script, which allows remote attackers to obtain sensitive information by downloading a .tgz file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-12T16:00:00.000Z
CVE-2012-2964 
The BreakingPoint Storm appliance before 3.0 requires cleartext credentials for establishing a session from a GUI administrative client, which allows remote attackers to obtain sensitive information by sniffing the network for XML documents.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-12T16:00:00.000Z
CVE-2012-2965 
Caucho Quercus, as distributed in Resin before 4.0.29, does not properly handle unspecified characters in the names of variables, which has unknown impact and remote attack vectors, related to an "HTTP Parameter Contamination" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-12T16:00:00.000Z
CVE-2012-2966 
Caucho Quercus, as distributed in Resin before 4.0.29, overwrites entries in the SERVER superglobal array on the basis of POST parameters, which has unspecified impact and remote attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-12T16:00:00.000Z
CVE-2012-2967 
Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the == (equals sign equals sign) operator for comparisons, which has unspecified impact and context-dependent attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-12T16:00:00.000Z
CVE-2012-2968 
Directory traversal vulnerability in Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to create files in arbitrary directories via a .. (dot dot) in a pathname within an HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-12T16:00:00.000Z
CVE-2012-2969 
Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to bypass intended restrictions on filename extensions for created files via a %00 sequence in a pathname within an HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-12T16:00:00.000Z
CVE-2012-2970 
The Synel SY-780/A Time & Attendance terminal allows remote attackers to cause a denial of service (device hang) via network traffic to port (1) 1641, (2) 3734, or (3) 3735.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-09T22:00:00.000Z
CVE-2012-2971 
The server in CA ARCserve Backup r12.5, r15, and r16 on Windows does not properly process RPC requests, which allows remote attackers to execute arbitrary code or cause a denial of service via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-10-20T10:00:00.000Z
CVE-2012-2972 
The (1) server and (2) agent components in CA ARCserve Backup r12.5, r15, and r16 on Windows do not properly validate RPC requests, which allows remote attackers to cause a denial of service (service crash) via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-10-20T10:00:00.000Z
CVE-2012-2974 
The web interface on the SMC SMC8024L2 switch allows remote attackers to bypass authentication and obtain administrative access via a direct request to a .html file under (1) status/, (2) system/, (3) ports/, (4) trunks/, (5) vlans/, (6) qos/, (7) rstp/, (8) dot1x/, (9) security/, (10) igmps/, or (11) snmp/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-19T15:00:00.000Z
CVE-2012-2975 
Cross-site scripting (XSS) vulnerability in the traffic overview page on the F5 ASM appliance 10.0.0 through 11.2.0 HF2 allows remote attackers to inject arbitrary web script or HTML via crafted requests that are later listed on a summary page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-11T18:00:00.000Z
CVE-2012-2976 
The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary shell commands via crafted input to application scripts, related to an "injection" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-23T17:00:00.000Z
CVE-2012-2977 
The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to change arbitrary passwords via crafted input to an application script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-23T17:00:00.000Z
CVE-2012-2978 
query.c in NSD 3.0.x through 3.0.8, 3.1.x through 3.1.1, and 3.2.x before 3.2.12 allows remote attackers to cause a denial of service (NULL pointer dereference and child process crash) via a crafted DNS packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-27T10:00:00.000Z
CVE-2012-2979 
FreeBSD NSD before 3.2.13 allows remote attackers to crash a NSD child server process (SIGSEGV) and cause a denial of service in the NSD server.
Problem types: description: Other
Affected products: vendor: nsd3
product: nsd3
Published: 2019-11-01T14:19:37.000Z
CVE-2012-2980 
The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC ChaCha, AT&T Status, HTC Desire Z, T-Mobile G2, T-Mobile myTouch 4G Slide, and Samsung Galaxy S stores touch coordinates in the dmesg buffer, which allows remote attackers to obtain sensitive information via a crafted application, as demonstrated by PIN numbers, telephone numbers, and text messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-21T10:00:00.000Z
CVE-2012-2981 
Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary Perl code via a crafted file associated with the type (aka monitor type name) parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-11T18:00:00.000Z
CVE-2012-2982 
file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | (pipe) character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-11T18:00:00.000Z
CVE-2012-2983 
file/edit_html.cgi in Webmin 1.590 and earlier does not perform an authorization check before showing a file's unedited contents, which allows remote attackers to read arbitrary files via the file field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-11T18:00:00.000Z
CVE-2012-2984 
Multiple cross-site scripting (XSS) vulnerabilities in monitor/m_overview.ink in Websense Content Gateway before 7.7.3 allow remote attackers to inject arbitrary web script or HTML via the (1) menu or (2) item parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-24T20:00:00.000Z
CVE-2012-2985 
Cross-site scripting (XSS) vulnerability in InsertDocument.aspx in CuteSoft Cute Editor 6.4 allows remote authenticated users to inject arbitrary web script or HTML via the _UploadID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-21T10:00:00.000Z
CVE-2012-2986 
lhn/public/network/ping in HP SAN/iQ 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) first, (2) third, or (3) fourth parameter.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-4361.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-20T22:00:00.000Z
CVE-2012-2990 
The MASetupCaller ActiveX control before 1.4.2012.508 in MASetupCaller.dll in MarkAny ContentSAFER, as distributed in Samsung KIES before 2.3.2.12074_13_13, does not properly implement unspecified methods, which allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via a crafted HTML document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-24T20:00:00.000Z