Microsoft Lync 2012 fails to properly sanitize user-supplied input, which can lead to remote code execution.
61de4ae8908966fb99a4402d4a1ab26569054da13bd2adc7681cdd71ec499425
WordPress version 3.4.2 fails to invalidate a user's session upon logout. Although it clears the cookie in the browser, the system will still accept it.
c014ef129a0b5317177cb784c0dcd2c87090fa4bcf013947908df791f86d533a