CVE-2012-2747

Unspecified vulnerability in Joomla! 2.5.x before 2.5.5 allows remote attackers to gain privileges via unknown attack vectors related to “Inadequate checking.” (CVSS:7.5) (Last Update:2012-07-04)

CVE-2012-2748

Unspecified vulnerability in Joomla! 2.5.x before 2.5.5 allows remote attackers to obtain sensitive information via vectors related to “Inadequate filtering” and a “SQL error.” (CVSS:5.0) (Last Update:2012-07-17)

CVE-2012-3828

Cross-site scripting (XSS) vulnerability in Joomla! 2.5.3 allows remote attackers to inject arbitrary web script or HTML via the Host HTTP Header. (CVSS:4.3) (Last Update:2012-07-17)