The Cacti Group are on a tear! In 2017, we released almost 40 releases of Cacti 1.x. It's been a rapid pace, but we now have several contributors helping us not only perfect the user interface, but enhance it to be what it has been touted to be from the beginning 'the complete RRDtool graphing solution'.

Cacti 1.x has changed drastically from earlier versions. We have incorporated 20 Cacti Group plugins into the Core of Cacti to make it easier for you to get started using it. When those plugins were merged, careful thought was givin to compatibility and design. They should all behave as a unified tool today.

With that said, we have another 19 or so plugins available on GitHub. So, though we have merged a number of them into the core of Cacti, there are several additional plugins that may be required depending on your use case.

Additionally, we have implemented internationalization. What this means is that if your preferred language is not English, you may have an option. Translations are available today in Spanish, Dutch, and German. There are several partially complete translations. If you are not a developer, and interested in giving back to the Cacti community, consider contributing to a Cacti Translation. You just have to follow our translation instructions on GitHub We also need help in Translating our 19 or so plugins.

Lastly, Cacti 1.x has theme support. So, if you need Cacti to look like your Corporate standard, hack away, or better yet, find a web developer.

• Remote data collectors (Pollers)
• Network discovery and automation
• Device management automation
• Expanded color sets
• Enhanced user, group and domain management
• User interface enhancements
• Additional RRDtool graph option support
• Multiple poller intervals
• Merged almost 20 plugins into core

For additional details check out the README.md located on GitHub

Active development of Cacti is located on GitHub! Join us in making Cacti better, submit issues, fork and submit pull requests!

Reporting Issues

Download Cacti

Download Spine

Thanks! The Cacti Group

Cacti 1.1.30

Spine 1.1.30

The following Cacti releases are end of life. We believe that release is stable, though you should make plans to upgrade your environment to Cacti 1.x. In the mean time, if for some reason you can not use Cacti 1.x, this version is preserved here for your reference.

Cacti 0.8.8h

Spine 0.8.8h

We the Cacti Group are proud to release the following:

Cacti 1.0.0

Spine 1.0.0

Important Security Fixes

CVE-2014-4000 PHP Object Injection Vulnerabilities
CVE-2016-2313 allows remote authenticated users who use web authentication to bypass intended access

Important Updates

Remote data collectors (Pollers)
Network discovery and automation
Device management automation
Enhanced user, group and domain management
User interface enhancements
Additional RRDtool graph option support
Merged almost 20 plugins into core

http://forums.cacti.net/viewtopic.php?f=4&t=56794

For additional details check out the README located on GitHub - https://github.com/Cacti/

Contribute

Active development of Cacti is located on GitHub! Join us in making Cacti better, submit issues, fork and submit pull requests!

Cacti 1.0.0 Change Log

feature: Support for remote data collectors
feature: Support Internationalization (i18n) for the main Cacti site, and supported plugins
feature: Data Source Profiles replace RRA settings allowing a single system to have multiple polling intervals
feature: Redesigned Tree page including Drag & Drop functionality
feature: New Graph Permissions system designed to make permissions simple to manage
feature: Add Themes 'Classic', 'Modern', 'Dark', and 'Paw'
feature: Debug Data Sources by comparing them to the Data Template
feature: New special Data Source type to detect the poller interval
feature: Bulk inserts in PHP poller to address latency issues
feature: Optimize data collection through in memory caching giving a 50% reduction in polling times when dealing with large sites
feature: Support RRDtool VDEFs
feature: Support new Graph Items: AREA:STACK, GPRINT:AVERAGE, GPRINT:LAST, GPRINT:MAX, GPRINT:MIN, LINE:STACK, TEXTALIGN, TICK
feature: Support RRDtool features: Right Axis Support, Dynamic Labels, Tab Width, Legend Position, Legend Direction
feature; Resizeable table columns
feature: Deprecated Single Pane Tree View
feature: Role Based Access Control (RBAC)
feature: Support User Group Permissions
feature: Show number of in use Graphs, Data Sources, and Devices for a given Template
feature: Support bulk re-sync of graphs to assigned Graph Template
feature: Bulk Device Settings changes
feature: CDEFs, Colors, GPrint Presets consolidated to Presets menu
feature: Authentication cookies for 'remember me' functionality
feature: Automatic logout after session inactivity
feature: Replace Boost server in favor of RRDtool Proxy
feature: Graph Details include CSV output, zoom, debug, and download links
feature: Graph Export moved to a plugin
feature: User change password functionality
feature: Automation added to core functionality through the merge of the Discovery and AutoM8 plugins
feature: Change interface graphs from 32 bit to 64 bit with ease
feature: Plugins now have hooks in device templates and automation
feature: Allow users to preview template imports to determine if there will be issues from importing
feature: Automatic removal of orphaned graph items when importing newer versions of graph templates
feature: Support for MySQL 5.7
feature: Support for PHP 7.0
feature: Merge Aggregate Plugin - Aggregate graph creation
feature: Merge AutoM8 Plugin - Automation of graph creation
feature: Merge Boost Plugin - Faster polling, result caching, on-demand RRDtool file updates
feature: Merge CLog Plugin - View Cacti logs
feature: Merge Discovery Plugin - Device discovery
feature: Merge Domains Plugin - Support for domain (ADS/LDAP) specific user templates
feature: Merge DSStats Plugin - Cache Data Source values for easy retrieval
feature: Merge Logrotate Plugin - Rotate Cacti logs
feature: Merge Realtime Plugin - Realtime graph viewing
feature: Merge Reporting (Nectar) Plugin - Reporting
feature: Merge RRDclean Plugin - RRD file cleanup and management
feature: Merge Secpass Plugin - User password policy enforcement
feature: Merge Settings Plugin - Shared settings for plugins
feature: Merge SNMP Agent Plugin - SNMP Agent for Cacti providing system statistics
feature: Merge SpikeKill Plugin - Remove unwanted spikes from graphs
feature: Merge SSL Plugin - Force https
feature: Merge SuperLinks Plugin - Add external links within Cacti
feature: Merge UGroup Plugin - User groups with permissions
feature: Merge Watermark Plugin - Watermark your Cacti graphs
bug: Fixed issue where old graph templates (0.8.6-), could import bogus data causing issues with Data Input Methods
bug#0000168: Duplicate data sources should be avoided when creating new graphs
bug#0000851: Review an imported template
bug#0001155: When viewing graph tree do not show empty nodes
bug#0001337: Form to filter for graphs in host view mode
bug#0001552: Date ranges not shown on graphs in the view with Daily, Weekly, Monthly & Yearly graphs
bug#0001573: RRA templates/grouping
bug#0001577: Override session handling and store session in Database
bug#0001790: Allow for XML delimiter in fields of a script query
bug#0001820: Unable to use a Data Input Method Output Field in more than one Data Source Item
bug#0001827: Changing the graph template messes up the graph item fields
bug#0001836: Add mysql error message to log
bug#0001877: Cookies path is not properly set
bug#0001966: Expand Devices in tree view not honored
bug#0001970: Data query index order cache should be populated on re-index
bug#0001981: Cacti is not full UTF-8
bug#0001986: CLI allow add_graphs.php to have multiples --snmp-field and --snmp-value options
bug#0001996: Allow using data input field in graph title
bug#0002096: Enumerated SNMP values not parsed correctly
bug#0002112: CLI add configurable parameters for device_add.php
bug#0002133: Restrict User to only manage specific device(s)
bug#0002135: Regular expression support for filter
bug#0002137: Data query oid_suffix parameter does not function
bug#0002159: Database creation file not fully compliant with strict SQL mode
bug#0002162: Unable to authenticate user with password containing UTF-8
bug#0002196: Incorrect script server instance number in log
bug#0002225: Make -Cc SNMP option configurable
bug#0002255: Script query_unix_partitions.pl should only query local mounts
bug#0002336: Implement php-snmp class library
bug#0002340: Data query script execution should be escaped
bug#0002350: SNMP Data Query index_order ignored
bug#0002351: Ping does not work with non-English locale
bug#0002361: Spine does not log unknowns the same way cmd.php
bug#0002362: Poller cmd.php makes wrong hex-string to decimal conversion
bug#0002370: Cacti prints wrong date formats, does not honor a systems locale
bug#0002403: Typo in DELETE statement leading to poor graphing performance
bug#0002412: Graph Template duplication causes to be converted to TAB char
bug#0002418: Data Source Items named 'ds' break UI ability to add more items
bug#0002419: SNMP enum results not parsed correctly by cmd.php poller
bug#0002452: CVE-2014-4000 PHP Object Injection Vulnerabilities
bug#0002454: OS Command Injection
bug#0002468: Changing graph format to anything but PNG causes no output
bug#0002476: Add support for SNMP v3 EngineID
bug#0002483: Cisco ASA using Re-index method of verify all causes recache event every time
bug#0002484: Incorrect SQL request in cli script repair_database.php
bug#0002521: Unable to create two devices via CLI with the same IP-Address
bug#0002522: Zero padded hex strings are parsed incorrectly
bug#0002535: Graph Template Changes not updating RRDTool command
bug#0002636: Creating Data Template with "U" for min and max saves field data_input_field_id as 0 for first item
bug#0002697: CVE-2016-2313 allows remote authenticated users who use web authentication to bypass intended access
bug#0002698: When the host is down the wrong data type are used for some columns in the host table
bug#0002723: Renaming a disabled device still attempts to connect and get SNMP host information
bug#0002724: Multipage graphs the menu can disappear
bug#0002725: Changing graph template does not mark correct interfaces disabled on data query generated list

Reporting Issues

http://www.cacti.net/issues.php

Download Cacti

http://www.cacti.net/download_cacti.php

Download Spine

http://www.cacti.net/spine_download.php

Thanks! The Cacti Group

We the Cacti Group are proud to release the following:

Cacti 0.8.8h

Spine 0.8.8h

We have moved source control to GitHub!

Read about it in announcement post! - http://forums.cacti.net/viewtopic.php?f=4&t=55666&p=260306

bug:0002656: Authentication using web authentication as a user not in the cacti database allows complete access (regression)
bug:0002667: Cacti SQL Injection Vulnerability
bug:0002666: When click the [Clear] button after clicking the [Refresh] button in Preview Mode , fails to CSRFcheck
bug:0002673: CVE-2016-3659 - Cacti graph_view.php SQL Injection Vulnerability
bug:0002676: Outdated MIBs for non-unicast packets
bug:0002677: Index is a MySQL 5.6 reserved word
bug:0002681: generate_graph_def_name() generates reserved word "cf"

http://www.cacti.net/bugs.php

http://www.cacti.net/download_cacti.php

http://www.cacti.net/spine_download.php

Thanks! The Cacti Group

We the Cacti Group are proud to release the following:

Cacti 0.8.8g Spine 0.8.8g

GitHub!

We have moved source control to GitHub! Read about it in announcement post!

http://forums.cacti.net/viewtopic.php?f=4&t=55666&p=260306

Cacti 0.8.8g Change Log

http://www.cacti.net/release_notes_0_8_8g.php

Reporting Bugs

http://www.cacti.net/bugs.php

Download Cacti

http://www.cacti.net/download_cacti.php

Download Spine

http://www.cacti.net/spine_download.php

Thanks! The Cacti Group

Release of Cacti 0.8.8f

We the Cacti Group are proud to release the following:
Cacti 0.8.8f
Spine 0.8.8f

Cacti 0.8.8f Change Log
bug:0002599: 0.8.8e Poller Script Parser is Broken
bug:0002600: cli/upgrade_database.php is missing releases
bug:0002603: Graph managment graphs.php save button does not work
bug:0002599: Poller Script Parser is Broken

Reporting Bugs

http://www.cacti.net/bugs.php

Download Cacti

http://www.cacti.net/download_cacti.php

Download Spine

http://www.cacti.net/spine_download.php

Thanks!

The Cacti Group

http://forums.cacti.net/viewtopic.php?f=21&t=54874

— Linegod 2015/07/23 01:39

Release of Cacti 0.8.8e

We the Cacti Group are proud to release the following and respectfully ask forgiveness for the disaster release 0.8.8d was...
Cacti 0.8.8e
Spine 0.8.8e

Important Security Fixes
Multiple XSS and SQL injection vulnerabilities
CVE-2015-4634 - SQL injection in graphs.php

Cacti 0.8.8e Change Log
bug: Fixed issue with graph zooming failing to work
bug: Fixed various SQL Injection vectors
bug#0002569: Impossible to have a URL pointing directly to a graph
bug#0002574: SQL Injection Vulnerabilities in graph items and graph template items
bug#0002577: CVE-2015-4634 - SQL injection in graphs.php
bug#0002579: SQL Injection Vulnerabilities in data sources
bug#0002580: SQL Injection in cdef.php
bug#0002582: SQL Injection in data_templates.php
bug#0002583: SQL Injection in graph_templates.php
bug#0002584: SQL Injection in host_templates.php
bug#0002586: Cannot delete data sources from the GUI
bug#0002592: graph_view.php - viewing host in new tab - Undefined index: nodeid
bug#0002594: status_fail_date and status_rec_date are set incorrectly after host is marked down
bug#0002597: Incorrect value in Hosts column on Host Templates page
bug#0002598: Incorrect row number in Devices -> (Edit) page

http://forums.cacti.net/viewtopic.php?f=4&t=54851

We the Cacti Group are proud to release the following:
Cacti 0.8.8d
Spine 0.8.8d

Important Security Fixes
Multiple XSS and SQL injection vulerabilities

Cacti 0.8.8d Change Log
bug: Fixed SQL injection VN: JVN#78187936 / TN:JPCERT#98968540
bug#0002261: PHP 5.4.0 added new error_reporting variable, causing cacti to show errors
bug#0002391: Odd Behaviour on ReIndex of Data Query Data
bug#0002393: Broken thumbnail images for graph templates
bug#0002402: Subtree must not have the same header as the parent header
bug#0002474: CLI add_device.php dows not set availability_method correctly
bug#0002449: The Save button does not work: Invalid html on page Console -> Cacti Settings: empty form tag
bug#0002428: Fail to delete all data input items when removing more than 1000 data sources
bug#0002439: Password with special character don't work with LDAP authentication
bug#0002461: invalid bn with ldap and anonymous bind
bug#0002465: Graph Export return empty CSV file
bug#0002484: Incorrect SQL request in cli script repair_database.php
bug#0002485: Broken pagenation on graph viewing
bug#0002489: SNMP - Get Mounted Partitions using Re-index method of Index Count Changed causes recache event every time
bug#0002490: Can not select page for multiple datasources per device
bug#0002494: CSV export always shows last day
bug#0002504: Data template search not functional
bug#0002542: [FG-VD-15-017] Cacti Cross-Site Scripting Vulnerability Notification
bug#0002543: Unable to switch pages within graphs_new.php due to invalid URL generation
bug#0002544: Duplicate entry in $nav_url during list view
bug#0002571: SQL Injection and Location header injection from cdef id CVE-2015-4342
bug#0002572: SQL injection in graph templates

http://forums.cacti.net/viewtopic.php?f=21&t=54716

— Linegod 2015/06/10 02:12

Cacti Docs user ids are linked to your http://bugs.cacti.net account.

The Cacti repository has been moved to github:

https://github.com/Cacti

— Linegod 2015/04/18 11:08

We the Cacti Group are proud to release the following:

• Cacti 0.8.8c
• Spine 0.8.8c

Important Security Fixes

• CVE-2013-5588 - XSS issue via installer or device editing
• CVE-2013-5589 - SQL injection vulnerability in device editing
• CVE-2014-2326 - XSS issue via CDEF editing
• CVE-2014-2327 - Cross-site request forgery (CSRF) vulnerability
• CVE-2014-2328 - Remote Command Execution Vulnerability in graph export
• CVE-2014-4002 - XSS issues in multiple files
• CVE-2014-5025 - XSS issue via data source editing
• CVE-2014-5026 - XSS issues in multiple files

Important Updates

• New graph tree view
• Updated graph list and graph preview
• Refactor graph tree view to remove GPL incompatible code
• Updated command line database upgrade utility
• Graph zooming now from everywhere

Cacti 0.8.8c Change Log

• bug#0002228: GPL incompatible files included in Cacti project in include/treeview
• bug#0002383: Sanitize the step and id variables CVE-2013-5588, CVE-2013-5589
• bug#0002385: Cannot export host templates while including dependencies
• bug#0002386: cli/upgrade_database.php is missing the last two releases
• bug#0002390: Poller/script issue with slash and backslash
• bug#0002405: SQL injection in graph_xport.php
• bug#0002431: CVE-2014-2326 Unspecified HTML Injection Vulnerability
• bug#0002432: CVE-2014-2327 Cross Site Request Forgery Vulnerability - Special Thanks to Deutsche Telekom CERT
• bug#0002433: CVE-2014-2328 Unspecified Remote Command Execution Vulnerability
• bug#0002434: Suppress SNMP UNITS Suffix from cacti_snmp_get() output
• bug#0002438: Down Host Detection issue when using SNMP Desc or SNMP getNext
• bug#0002446: Subtract plugin processing time from Poller sleep time
• bug#0002453: CVE-2014-4002 Cross-Site Scripting Vulnerability - Special Thanks to G. Geshev (munmap)
• bug#0002455: Incomplete and incorrect input parsing leads to remote code execution and SQL injection attack scenarios
• bug#0002456: CVE-2014-5025 / CVE-2014-5026 - Cross-Site Scripting Vulnerability - Special Thanks to Adan Alvarez and Paul Gevers
• bug: Fix COMMENT handling, even in case COMMENT is empty, with or without HR and with variable substitution
• bug: Fix issues when SNMP data holds a ”=”; “explode” must be treated accordingly
• bug: Fix filter highlighting on data sources for the data template field
• bug: correct description of SNMP V3 parameters
• feature: Added native jquery, jqueryui, and jstree
• feature: Fixed issues with 'Clear' under preview not working
• feature: Added new Tree navigation
• feature: Added Columns and Thumbnails to Preview
• feature: Added Columns to Tree (Preview only)
• feature: Both Graphs and Columns default to 'Default'
• feature: Resolved Left hand navigation taking entire page
• feature: Added new graph zoom to tree view and preview offering a “quick” (default) and an “advanced” mode

Reporting Bugs

http://www.cacti.net/bugs.php

Download Cacti

http://www.cacti.net/download_cacti.php

Download Spine

http://www.cacti.net/spine_download.php

Thanks!

The Cacti Group

http://forums.cacti.net/viewtopic.php?f=4&t=53725

— Linegod 2014/11/24 00:14

Release of Cacti 0.8.8b

We the Cacti Group are proud to release the following:

• Cacti 0.8.8b
• Spine 0.8.8b

Cacti 0.8.8b Change Log

• bug: Fixed issue with custom data source information being lost when saved from edit
• bug: Repopulate the poller cache on new installations
• bug: Fix issue with poller not escaping the script query path correctly
• bug: Allow snmpv3 priv proto none
• bug: Fix issue where host activate may flush the entire poller item cache
• security: SQL injection and shell escaping issues

Reporting Bugs

http://www.cacti.net/bugs.php

Download Cacti

http://www.cacti.net/download_cacti.php

Download Spine

http://www.cacti.net/spine_download.php

Thanks! The Cacti Group

— Linegod 2013/08/06 23:20

User Herve Donati has contributed the Predict plugin, which used the PREDICT RRDtool feature, allowing for future predictions.

Check it out.

— Linegod 2012/11/07 01:08

We the Cacti Group are proud to release the following:

   Cacti 0.8.8a
   Spine 0.8.8a

The Plugin Architecture is now part of the official Cacti release!

Read more at http://forums.cacti.net/viewtopic.php?f=4&t=47167

We the Cacti Group are proud to release the following:

• Cacti 0.8.8
• Spine 0.8.8

The Plugin Architecture is now part of the official Cacti release!

Read the full announcement: http://forums.cacti.net/viewtopic.php?f=4&t=46926

On Friday December 16th 2011 we were informed by a very nice person that they where able to retrieve the users table for the Cacti forums.

Read more at this post: http://forums.cacti.net/viewtopic.php?f=21&t=45953

— Linegod 2011/12/19 17:55

We the Cacti Group are proud to release the following:

• Cacti 0.8.7i
• Spine 0.8.7i
• Cacti 0.8.7i with Plugin Architecture version 3.1

Note with this release we are no longer making people patch Cacti to use the Plugin Architecture. We did the work for you and now provide a completely patched release of Cacti with Plugin Architecture version 3.1.

View the bug fixes and enhancements at this forum post

We the Cacti Group are proud to release the following:

• Cacti 0.8.7h
• Spine 0.8.7h
• Cacti Plugin Architecture 3.0 for Cacti 0.8.7h

View the bug fixes and enhancements at this forum post

— Linegod 2011/09/26 01:04

The Cacti Group is pleased to announce the beta release of:

• Cacti 0.8.7h
• Plugin Architecture 3.0 for Cacti 0.8.7h
• Spine 0.8.7h

Please report any bugs to http://www.cacti.net/bugs.php

For support issues, please post in the beta discussion thread.

Beta files can be downloaded from: http://www.cacti.net/downloads/beta/

— Linegod 2011/03/13 10:52

TheWitness has created a couple of walk-through videos for pending 1.0 releases.

You can see them on the bottom of the aggregate and flowview pages

— Linegod 2011/01/04 21:21

The wiki has been upgraded.

If you notice any issues, please post them in this thread: http://forums.cacti.net/viewtopic.php?f=4&t=41266

— Linegod 2011/01/02 14:22

The Cacti Forums have been upgraded.

If you notice any issues, please post them in this thread: http://forums.cacti.net/viewtopic.php?f=4&t=40082

— Linegod 2010/09/26 18:12

The following patch was released on 2010/08/31

Unified patch that fixes multiple issues and improves windows support. The fixes include the following bugs:

• bug#0001669: Problems with getting data from script using SPINE on Windows Server 2003 x32
• bug#0001829: Wrong string numerical value got from Spine SNMP poller
• bug: Net-snmp API issues cause spine crashes with some SNMP agents
• bug: Host list not properly initialized
• bug: Mutex locking issues cause deadlocks in Windows
• bug: Escape windows type back slashes in scripts

The patch can be downloaded at http://www.cacti.net/spine_download_patches.php

A Windows binary has also been uploaded.

The Windows binary can be downloaded at http://www.cacti.net/downloads/spine/packages/Windows/cacti-spine-0.8.7g.zip

Older -->

1.1.30

issue#1155: Non-secure mail setting not functional due to changes in phpmailer
issue#1157: Resolve issue with branch permission api
issue#1158: Change CLOG to use regex replacement so line details are not mangled
issue#1161: Graph View regex's are not preserved during automatic page refresh
issue#1162: Error messages are not display when editing a user
issue#1166: Default language was not correctly set when editing a user
issue: basename function undefined during upgrade to 1.0.x
issue: Storage API and translations required for Change password function
issue: ALTER IGNORE still throws an error when attempting to drop the primary key
issue: Data Source profile form API generates error when system is half upgraded
issue: Resolve issue with importing packages
feature: Update package versions for Cacti version 1.1.29

1.1.29

issue#871: Allow Nth Percentile and Bandwidth Summation to respect 'Base Value' in template
issue#965: Duplicate error message and incorrect error code when using LDAP authentication
issue#1084: Graph Tree Branch not properly populating when editing report item
issue#1104: Datetime formatting in developer debug mode incorrect
issue#1106: Template Filters has empty row
issue#1109: URL used in redirection when referrer already has parameters in it
issue#1110: Add CPU Total to 'SNMP - Get Processor Information'
issue#1111: PHP NOTICE when using LDAP authenication
issue#1116: Filters not allowing "None" or "All" when editing report item
issue#1119: Reduced amount of data fetched for CPU usage to just the data used
issue#1121: Bandwidth summation not using correct locale
issue#1122: Fix issue with local login / potential password problems
issue#1128: Resolve php warning when raising messages
issue#1130: Fix logging level issue where logs of same level as setting where not logged
issue#1131: Make upgrade_database.php use same version compare as /install/ system
issue#1133: Fix issues with variable name and debug log
issue#1141: When viewing graphs from list view, pagination causes list view filter to be cleared
issue#1143: ss_host_cpu.php - Division by zero / Invalid Return Value
issue#1146: Installation now checks URI path matchs with configuration option URL_PATH
issue: Updated Graph pagenation and filter reset
issue: Resolve issues with cacti_version_compare() processing
issue: Zoom context menu stays open after zoom out actions
issue: Paginator object was not always translated

1.1.28

issue#958: User Group Tree permissions not calculated fully
issue#959: Issue viewing email reports due to email client decoding problems
issue#992: RRDfile naming issues that result from random sorting during export
issue#1012: Issue where disabled devices will not appear in Tree editor
issue#1044: Handle invalid exclusion regex properly when viewing the log
issue#1045: Issue with multiple pages and confirmation dialogs
issue#1048: Problem importing vdefs from templates
issue#1053: Remote Data Collector now works with https and self signed certificates
issue#1055: Errors in data source statistics inserts when invalid output is encountered
issue#1057: CVE-2017-16641 - Potential vulnerability in RRDtool functions
issue#1058: ICMP Ping to and IPv6 address fails to gather data for ping latency
issue#1059: Aggregate item filter should use regular expressions to avoid SQL errors due to flawed filter logic
issue#1064: When a Device Template is removed, Automation Templates for that Device Template remain
issue#1066: CVE-2017-16660 in remote_agent.php logging function
issue#1066: CVE-2017-16661 in view log file
issue#1071: CVE-2017-16785 in global_session.php Reflection XSS
issue#1074: Boost records get stuck in archive
issue#1079: Undefined index in lib/snmpagent.php
issue#1085: Undefined function html_log_input_error
issue#1086: Rerun data queries in automation process has no effect
issue#1087: cli/add_device.php --proxy option does not work with non-snmp devices
issue#1088: Set timeout for remote data collector context
issue: Minor performance increase in boost processing
issue: Poller output not empty not processed correctly on Log tab
feature: Timeout to the remote agent for realtime graphs
feature: Updated Dutch translations
feature: Database update adding additional indexes for increased performance
feature: Updated PHPMailer to version 5.2.26
feature: Updated phpseclib to version 2.0.7

1.1.27

issue#1033: Issues inserting into dsstats table due to legacy data
issue#1039: Using html_escape still double escapes. Use strip_tags instead
issue#1040: Resolving compatibility issue with PHP7.2

1.1.26

issue#841: --input-fields variable not working with add_graphs.php cli
issue#986: Resolve minor appearance problem on Modern theme
issue#989: Resolve issue with data input method commands loosing spaces on import
issue#1000: add_graphs.php not recognizing input fields
issue#1003: Reversing resolution to Issue#995 due to adverse impact to polling times
issue#1008: Remove developer debug warning about thumbnail validation
issue#1009: Resolving minor issue with cmd_realtime.php and a changing hostname
issue#1010: CVE-2017-15194 - Path-Based Cross-Site Scripting (XSS)
issue#1027: Confirm that the PHP date.timezone setting is properly set during install
issue: Fixed database session handling for PHP 7.1
issue: Fixed some missing i18n
issue: Fixed typo's
feature: Updated Dutch translations
feature: Schema changes; Examined queries without key usage and added/changed some keys
feature: Some small improvements

1.1.25

issue#966: Email still using SMTP security even though set to none
issue#995: Redirecting exec_background() to dev null breaks some functions
issue#998: Allow removal of external data template and prevent their creation
issue: Remove spikes uses wrong variance value from WebGUI
issue: Changing filters on log page does not reset to first page
issue: Allow manual creation of external data sources once again
feature: Updated Dutch translations

1.1.24

issue#932: Zoom positioning breaks when you scroll the graph page
issue#970: Remote Data Collector Cache Synchronization missing plugin sub-directories
issue#980: Resolve issue where a new tree branches refreshs before you have a chance to name it
issue#982: Data Source Profile size information not showing properly
issue: Long sysDescriptions on automation page cause columns to be hidden
issue: Resolve visual issues in Classic theme
feature: Allow Resynchronization of Poller Resource Cache

1.1.23

issue#963: SQL Errors with snmpagent and MariaDB 10.2
issue#964: SQL Mode optimization failing in 1.1.22

1.1.22

issue#950: Automation - New graph rule looses name on change
issue#952: CSV Export not rendering chinese characters correctly (Second attempt)
issue#955: Validation error trying to view graph debug syntax
issue: MySQL/MariaDB database sql_mode NO_AUTO_VALUE_ON_ZERO corrupts Cacti database
issue: When creating a data source, the data source profile does not default to the system default
feature: Enhance table filters to support new Cycle plugin
feature: Updated Dutch Translations

1.1.21

issue#938: Problems upgrading to 1.1.20 with one table alter statement
issue#952: CSV Export not rendering chinese characters correctly
issue: Minor alignment issue on tables

1.1.20

issue#920: Issue with scrollbars after update to 1.1.19 related to #902
issue#921: Tree Mode no longer expands to accomodate full tree item names
issue#922: When using LDAP domains some setings are not passed correctly to the Cacti LDAP library
issue#923: Warninga in cacti.log are displayed incorrectly
issue#926: Update Utilities page to provide more information on rebuilding poller cache
issue#927: Minor schema change to support XtraDB Cluster
issue#929: Overlapping frames on certain themes
issue#931: Aggregate graphs missing from list view
issue#933: Aggregate graphs page counter off
issue#935: Support utf8 printable in data query inserts
issue#936: TimeZone query failure undefined function
issue: Taking actions on users does not use callbacks
issue: Undefined constant in lib/snmp.php on RHEL7
issue: Human readable socket errno's not defined
issue: Audit of ping methods tcp, udp, and icmp ping. IPv6 will still not work till php 5.5.4

1.1.19

issue#810: Scripts in packages don't match distribution
issue#919: Unable to upgrade to 1.1.18
issue: Update documentation for minimum PHP 5.4

1.1.18

issue#902: Correcting some issues with Console and External Links
issue#903: Upgrade pace.js to v0.7.8
issue#904: Allow user to hide Graphs from disabled Devices
issue#906: Create a separate Realm for Realtime Graphs
issue#907: XSS issue in spikekill.php
issue#910: Boost last run duration generates an error on new install
issue#914: Unable to purge Cacti logfile from System Utilities
issue#915: Non-numeric data in ss_host_disk.php
issue#916: Resolve display of errors when encountering ldap issues
issue#918: Minor XSS and create generalized escape function
issue: Resolve JavaScript errors on Login page
issue: Resolve JavaScript errors on Permission Denied pages
issue: Graphs tab would appear in non-classic even if you did not have permissions
feature: Updated dutch translations

1.1.17

issue#450: List View to Preview shows no results
issue#486: Export Device table results to CSV
issue#544: Allow Log Rotation to be other than Daily
issue#673: Downtime/Recovery time/date is set incorrectly
issue#819: Customized timespans for graphs
issue#888: Rebuilding Poller Cache when External data sources are present results in false positive warnings in the log
issue#891: Database.php unable to connect to MySQL when using port different than 3306
issue#893: Warning messages when duplicating CDEF objects
issue#897: Due to browser use of special key, deprecate ctrl-shift-x for clearing filter
issue#898: Issue with tcp and udp ping due to file description allocation changes
issue: Unable use ipv6 ip addresses for snmp ping in the Cacti GUI
issue: Update language of the Rebuild Poller Cache menu pick
issue: Broken design for input controls with Sunrise theme
issue: Timespan switching not switching to Custom in Preview Mode
issue: Log rotation would not occur under certain conditions. Provide more control over log functions
issue: Purge log file always purged the cacti.log, not the selected log
issue: Unable to view graphs for errored data sources from Cacti log

1.1.16

issue#865: Escape Data Query arguments to prevent issues with special characters
issue#872: Can't add device items to graphs generated with no device and no template
issue#875: When modifying Realm permissions, realms that are listed multiple times don't stay in sync
issue#877: Improving resolution to issue#847 and one additional vulnerability
issue#878: Ambiguous language in purge log function
issue#879: SQL Error when adding a report item to a report
issue#880: Device drop down is limited to 20 devices and lacks a scroll bar
issue#885: Graph generated with no device and no graph template forgets device definitions
issue#886: Unable to export templates other than Device templates
issue: Address additional corner cases around get_order_string usage
issue: Data Queries sharing a Data Source can result in poller output table not empty errors
issue: Fix Sunrise theme to properly theme multiselect widgets
issue: Increase height of multiselects so that more options are visible
issue: When a graph is locked, anchor tags are still functional

1.1.15

issue: PHP Fatal Exception on upgrade from 1.1.11 or earlier
feature: Added test to detect install upgrade code problems

1.1.14

issue#849: Unable to select host in Graph Item pick
issue#850: Reporting not allowing Non-templated Graphs
issue#858: Pagination on SNMP Options wrong
issue#860: Network Discovery Subnet Range character limit too small
issue#861: The search filter does not support Cyrillic
issue#862: Automation - When editing Graph Rules, unable to Change Data Query
issue#863: Typo error in auth_login.php for LDAP authentication
issue#867: Cross-site scripting (XSS) vulnerability in auth_profile.php
issue: Link's not showing in Automation Graph and Tree rules on Sunshine theme
issue: Make Templates Export responsive
issue: Don't wrap menu glyphs and menuitems
issue: The function get_order_string() can fail when encountering reserved word columns
issue: Data Query Delete is not using callback
feature: Resize Graphs on Graph page to be responsive
feature: Make import text a hidden field as it is likely seldom used

1.1.13

issue#605: Remove Spikes feature not fully functional
issue#814: Allow 'Save' feature from New Graphs
issue#837: Using the add_device.php CLI script, you can not 'default' the device threads to other than 1
issue#838: CVE-2017-10970: XSS Issue in link.php
issue#839: The Database column name 'rows' is a reserved word in MariaDB 10.2+
issue#845: External links tabs should appear at the end of the tab view
issue#846: Web crawl of Cacti site shows errors in the log
issue#847: CVE-2017-10970: XSS Issue in lib/html_form.php.
issue#853: Go and Clear buttons do not work in all cases on Graph Rules pages
issue: Up/Down arrow titles labeled incorrectly on Tree Management page
issue: Make the default Export Type a Device Template
issue: Fix SNMPagent MIB cache issues
issue: Realtime cache cleanup now only removes rrd and png
issue: When redirected from reports, you can receive a validation error
feature: updated Dutch language

1.1.12

issue#822: Aggregate Graph Items are incorrectly editable
issue#823: Allow Filters to be hidden
issue#834: Add spacing on graphs pages
issue: Uninstalled plugins can not install
issue: Location of filter functions in host.php prevent full responsive filter implementation
feature: Implement first phase of responsive search filters

1.1.11

issue#642: RRA not written or WARNING: Poller Output Table not Empty
issue#779: PHP running out of memory due to date format issues
issue#791: SeLinux causing problems due to recent enhancement of the Cacti log
issue#818: Unable to unselect all SpikeKill templates under settings
issue#831: Unable to add devices from automation devices that don't have a snmpSysname
issue: incorrect version of pace: fix progess bar
issue: date_format(): fix date separator character
issue: host.php: fix itemCount en rowCount when result = null
issue: clog: fix scandir for systems with limited permissions to log directory
issue: clog: fix listing of logfiles
issue: Stop New Graphs filter interface from taking too much space
issue: Pagination of clog is not done via ajax
issue: Unable to dry run spikekill's from Graphs page
issue: Default sort order does not highlight on Aggregate Template page
issue: Correct display issue with Graph Templates when editing Device
issue: External Data Sources show as having poller interval on Data Source page
issue: Allow Selecting 'External' as the Data Source Profile when creating non-templated Data Source
issue: Remove Field Order on Data Input output data as it's not required
issue: Data Templates not using Ajax callbacks to switch Data Sources
issue: Visual issue when creating non-templated Aggregate Graphs
feature: new skin: Sunrise
feature: Provide Non Compatible explanation when a plugin is not compatible
feature: Updated Dutch translations
feature: Allow Graph Templates with multiple flag to be created repeatedly from Graphs New interface
feature: Allow plugins to exclude files and directories from their remote poller synchronization process
feature: Add Device Description to View Poller Cache UI

1.1.10

issue#779: Resolve random apache segfault due to recursion
issue#786: Unable to create second RRA for a Data Source Profile with collection rate less than 5 minutes
issue#789: Unable to Clear Filter due to JavaScrpt name space collision
issue#791: cacti 1.1.9 and clog_webapi.php permission issue
issue#794: SQL Error when creating graphs manually
issue#798: Cosmetic issue when checking checkboxes in Cacti
issue#800: Unchecked loop in lib/html_utility.php causing race condition
issue#802: Issue updating device hostname with SNMP data queries
issue#803: Issues with utf8mb4 introduced via optimization
issue: If the device is down and snmp_sysUpTimeInstance is 0, time in state can be wrong
feature: Updated Dutch translations

1.1.9

issue#788: Fails on PHP Fatal error if LDAP auth enabled

1.1.8

issue#529: Issue on Graph New page with checkbox unselected
issue#552: Minor selectable row checkbox issue
issue#577: Dragging multiple items causes the tree to refresh too early
issue#617: Correct poller timeouts when no devices are associated with active data collector
issue#706: Classic external link template images missing
issue#726: Undefined variable in upgrade script
issue#728: Resolve issues with jQueryUI empty dialogs
issue#731: Add class to radio button labels to correct display issue
issue#736: Sequence numbers not visible when editing templates using modern theme
issue#739: Graph Titles missing on aggregate graphs
issue#740: Spacer manipulation broken after update to responsive forms
issue#741: Errors in dsstats with very large RRDfiles with more than 60 data sources
issue#748: Search results are not cleared on Aggregates
issue#754: Default Language for user and system are not set on new installation
issue#755: RRDtool Graph Watermark is incorrect
issue#756: Resolving some translation issues
issue#763: Template Export not functional
issue#765: Validation error when viewing Utility View
issue#771: Editing a report renders no options after creation
issue#780: Preview always shows thumbnails in reports interface
issue: Hide Aggregate system cdefs when editing graphs and graph templates
issue: Updating Utility View zoom was not updating table data
feature#723: Convert Data Source dropdown to autocomplete when editing standalone graphs
feature#735: Allow color selection in graphs and templates to be autocomplete
feature#753: Preliminary support for RRDtool 1.7.
feature: Add function to obtain the current execution user
feature: Implement Site timezones as autocomplete for performance
feature: For themes other than classic, make color id selection autocomplete
feature: CLOG timestamp is now formatted as defined in settings
feature: CLOG can show loginformation from rotated logfiles

1.1.7

issue#470: Enhance Cacti's SNMP function and Data Query XML, add hex|string|guess
issue#653: Devices with empty sysNames are not added to discovered devices
issue#655: Data source not displaying device name
issue#658: Scheduled Reports (type "tree") not working
issue#662: Sending test Email should optionally bypass ping
issue#667: In Classic theme initial view of Tree view broken
issue#669: Invalid SQL Messages when upgrading to Cacti 1.0.5
issue#670: Validation error when you do "Change Graph Template" in Cacti
issue#672: Cacti unable to enable snmp notification receiver mibs
issue#680: Sort order in Time Graph View
issue#687: Cacti DB access not compatible with PHP 7
issue#696: Multiple issues with snmpagent notification UI
issue#699: Add custom error handler for ping functions
issue#704: Fix GUI issues for Graphs not belonging to a device
issue#707: Back button not working
issue#708: Issues finding lib/snmp.php in host disk functions
issue#712: Change Graph Template dropdown invalid
issue#717: Allow ajax callbacks when adding non-templated graph items
issue: Reports were not using Cacti's permission system for checking access
issue: User Admin page reported wrong permissions at Tree level missing some i18n as well
issue: Short data_name can cause data collection issues
feature: Updated Dutch language
feature: Updating PHPMailer to 5.2.23
feature: Support input-output Data Query types
feature: Introduce new get_cacti_version() to reduce database calls on pages

1.1.6

issue#620: The table poller_data_template_field_mappings can get out of sync when manipulating data templates
issue#622: Can not connect to MySQL over a socket
issue#628: Cacti upgrade process is complex and error pront for developers
issue#635: Error when saving change to data template
issue#637: When displaying tree graphs, use the same layout as preview mode
issue#646: When a plugin is disabled during page operations, warnings can appear
issue#651: Unable to view cacti log (because of allowed memory size exhausted)
issue#657: Error in log when host is down, using icmp and using cmd.php on FreeBSD
issue: List for creating a Graph type shows already added Graph Templates
issue: Fix and undefined variable on data source page when first creating a manual data source
issue: Remove tabindex and other non-required manual aria controls from pages
issue: Table type and column type in poller_output table wrong
issue: FILTER_VALIDATE_MAC not defined on PHP less than 5.5
issue: When changing your language Cacti would not do a full page refresh
feature#106: Paginated CLOG and log administration
feature: Dutch translations
feature: Responsive Graphs page
feature: Convert forms from table based to div based for responsive design
feature: Better support for phones and tablets
feature: Simplified installation code to facilitate easier release cycle
feature: Updating Tablesorter to v2.28.9, adding widgets and pager

1.1.5

issue#580: Data collection warnings when using cmd.php
issue#592: Incorrectly formatted HTML
issue#606: Replace in data input methods
issue#607: Allow draw_menu to specify multiple actions for the same URL
issue#608: Spaces adjacent to double quotes are eliminated during data input method import
issue#609: Honor the column setting in graph tree view mode
issue#610: Change Graph Template action not available
issue#611: Cacti Installation Wizard - Spine page incorrect on Windows
issue#612: Uncaught Error: Call to a member function row() on a string
issue#613: Network Automation, now requires a site or your are unable to save rules
issue#615: Data Input field length too short for longer scripts
issue#619: Export logging option in settings no longer used

1.1.4

issue#524: Reporting not working when Tree branch is device
issue#560: Add 'Duplicate' and 'Convert to Graph Template' back to Graph Management page for Advanced mode
issue#573: Missing Graph Template dropdown items
issue#575: Very large hex strings result in scientific notation that RRDtool rejects
issue#579: Problems logging in using nginx web server
issue#581: session_start() warnings when manually sending reports
issue#584: Issues reporting memory recommendation on utilities page
issue#586: Overrunning pollers can cause system load spikes
issue#587: Data Collector setting under Network Discovery is not being used
issue#588: Devices with blank sysDescr are added to the first Device Template in error
issue#589: Automation discovery does not allow site association
issue#590: Unable to create a plugin based menu
issue#591: Row selection in Device Automation Templates not sane with drag-n-drop enabled
issue#601: Resolving some translation issues
issue#604: Unexpected backtrace on regular expression filters
issue#605: Remove Spikes non-numeric data causes warnings
issue: Ping email does not use a from email address
issue: Automation does not recognize default size or poller
issue: Unable to drag-n-drop on automation templates pages when enabled
issue: Fixed number of hosts in poller stats for first poller
issue: Fixed screenwidth issue in tab PHP-Info of Utilities module
issue: Recovery poller could get stuck in some situations
issue: Fix JavaScript errors when managing Aggregate Graphs
feature: Reorganize defaults to place more on device defaults page
feature: Update jQuery tableDnD to version 0.9
feature: More tolerant of empty PHP_SELF found with some web servers

1.1.3

issue#515: Unable to import color CSV file
issue#519: In non-classic themes its not possible to remove Cacti log or reporting tabs
issue#520: SQL error in graph automation
issue#521: Cacti allows removal of Data Query Graph Template associations when they are in use
issue#525: LAST GPRINT type not rendered correctly due to lack of escaping
issue#530: Undefined function get_vdef in lib/rrd.php
issue#531: Issues with TextAlign and Tick graph items
issue#532: Unreliable scroll height causes issues in Chrome
issue#533: User settings not cleared after saving profile
issue#534: Automation issue with AS clause
issue#538: Unable to rename tree folder
issue#541: Issues with mobile graph viewing
issue#555: DSStats SQL insert errors due to data collection issues
issue#563: Division by zero in removespikes.php
issue: Fixed rendering issues with HRULE's on graphs
issue: Update jsTree to 3.3.4 version
feature: Improved responsiveness UI tables, filters, and menus

1.1.2

issue#492: Error while adding non data query (cg) graphs
issue#494: CLI error while importing template
issue#499: SQL error in graph automation resulting in no graphs on tree
issue#500: Generic SNMP device package damaged - Unix Ping Host
issue#505: Log rotation does not work in some cases
issue#506: Undefined index: cactiStatsDeviceFailedPolls
issue#507: Nextwork discovery 'export' produces no results
issue#509: Minor bug with device ownership selection
feature: Add new legend type that includes Current/Average/Minimum/Maximum
feature: Update d3.js to latest version 4.7.4

1.1.1

issue#457: Continued LDAP issues with initial user creation
issue#461: The function escapeshell arg not appropriate on Windows
issue#462: LDAP authorization issues: group membership check broken for 'Group Member Type' = 'Username'
issue#464: Change default batch spike removal limits for standard deviation and variance
issue#465: Less than sign inside items and labels of graph break graph
issue#466: Call to member function row() on a non-object in lib/snmpagent.php
issue#467: Reduce the number of queries in log function
issue#472: Schema changes to improve performance
issue#485: When editing a device, the ping status was not always returned
issue: Back button issues due to syntax problems in JavaScript
issue: Zoom periodically would loose it's crosshairs after zooming
issue: Zoom would zoom out into the future even when disabled
issue: Fixing lite corruption in graph_templates_item table
feature: Make SpikeKill options more consistent
feature#459: Add variable date time option to report mail subject
feature#460: Add external_id to host variables
feature#469: Change re-index method of Data Query from Device edit
feature: Support generalized date format approach in the GUI
feature: Use localStorage over a Cookie for Zoom setting storage
feature: Fully implement 'Remove Orphans' from Package import process

1.1.0

issue#337: Generic SNMP OID Graph Template damanged
issue#338: Extremely slow new graph/DS creation
issue#353: Broadcast & Multicast Packet counters missing
issue#376: Structured RRD path permission issues
issue#389: Manual template based graph creation not working
issue#407: The RRDfile does not exist message is misleading
issue#410: Select character data was interpreted as hex by cacti_snmp_walk()
issue#422: additional issues with LDAP authentication
issue#424: Automation does not discover devices w/o resolvable hostnames
issue#427: undefined index TotalVisibleMemorySize on FreeBSD
issue#432: SpikeKill menu wonky on Paw Theme
issue#434: password_verify not compatible in php5.4-
issue#435: urlPath missing from paw theme links
issue#436: Restricted user does not see graphs in tree view
issue#443: Allow remote_agent.php through a NAT
issue#446: No local admin when using multiple LDAP configuration
issue#447: Creating another non data query graph from same template reuses first data source
issue#449: exec_poll_php does not flush pipes when using script server
issue#450: Graph list view - No Graphs Found
issue: Improve email test exception errors and change default timeout to 10 seconds
issue: When on links page, breadcrumbs would become corrupted
issue: When upgrading from any version of Cacti to 1.0.5, SQL's relative to poller_reindex might appear
issue: Color page performance poor
issue: The Device dropdown on the Graph View page was unreliable
issue: Aggregate and non-Device Graphs in list view had not Device or Title description
issue: Re-engineer back button design to accomocate ajax and native navigation
issue: Make Graph Template filter wider
issue: Resolve some visual issues in Classic theme
feature: Add page refresh API to make page refreshing in Ajax easier to accomplish
feature: Update fontawesome to version 4.7
feature: Use fontawesome glyphs for menu items
feature: Support multiple column sort in table library
feature: Add glyphs to main Cacti console menu

1.0.6

issue#386: Allow special characters in graph title
issue#414: Install Wizard check path for spine
issue#415: SNMP session handling broken
issue#418: LDAP create user from template not working

1.0.5

issue#296: Poller warning for Non-SNMP device
issue#319: Add default 'High Collection Rate' data source profile to new installs to demonstrate concept of multiple rates
issue#330: Import templates to non-default Data Profile
issue#337: Error when try create new graph - SNMP - Generic OID
issue#342: Infinite loop in poller_automation.php with invalid schedule
issue#343: Device discovery cannot handle dots in device name
issue#344: Unable to upgrade to latest Cacti on FreeBSD
issue#353: Legacy broadcast & multicast packet counters missing in interface.xml
issue#354: Place on tree dashes / ordering is not correct
issue#355: Replace table rows with count when using InnoDB tables
issue#357: If recovery mode runs longer than a polling interval, a second is spawned
issue#358: Sending test e-mail results in warning
issue#360: Issue importing cacti.sql with some charsets
issue#364: Moving graph item causes page render issue
issue#365: ss_host_disk.php and ss_host_cpu.php should use return
issue#367: Upgrade chart.js to version 2.5
issue#368: Issue with device automation ip vs. ip_address
issue#369: Interface bits/second total Bandwidth wrong CDEF
issue#375: Drag and Drop of Devices and Graphs allows dropping onto self
issue#380: Ignores a non-standard SNMP port
issue#382: When using php5.5+ new users unable to change their password
issue#384: graph_view.php backtrace errors
issue#385: Unable to place an aggregate grapn on a subtree
issue#390: Display graphs from this aggregate icon next to graph not displaying
issue#392: cdef.php missing sql where for system cdef's
issue#398: checkbox is not honored when creating tree
issue#399: External link configuration: Order buttons don't work
issue#400: SNMP Engine ID (v3) field too short
issue#401: Graphs -> Apply Automation Rules fails
issue#404: Success even when test mail fails
issue#406: HRULE text format special characters not escaped
issue#408: Suppress SNMP units suffix from cacti_snmp_get() output
issue: Improve is_ipaddress functions
issue: Drag & drop showing when disabled on page automation_templates.php
issue: Output messages displayed incorrectly in automation_templates.php and automation_snmp.php
issue: Importing template from old Cacti would not show data templates
issue: Handle snmp error exceptions better
issue: Update Apache .htaccess files to support multiple version
issue: When executing a full sync, if the table structured has changed, recreate the remote table
issue: Multiple domains not working as expected
feature#197: Add external_id to Cacti for linking Cacti to other monitoring systems
feature#332: Support copy user groups
feature: Log proper IP address if logging in behind a NAT
feature: New qquery parsing rules: VALUE/TEST, VALUE/TABLE, VALUE/HEX2IP

1.0.4

feature: Javascript: make menu movement smooth and use localStorage
feature: Added cacti_snmp_get_raw() for plugin developers
issue#288: Function cacti_snmp_get bad handling of wierd value into snmp_value
issue#298: Graph generation issue with SNMP - Bits/Sec + Total Bandwith
issue#301: Unresolvable DNS hostname causing backtraces
issue#302: spikekill memory leak
issue#303: Error when creating tree items with "&" in the name
issue#307: Aggregate graph gives CMDPHP errors
issue#308: UI resize issue
issue#309: Show "Save Successful" notification permanently
issue#311: Graph thumbnail settings in profile setting does not work
issue#320: Users can not change their own password
issue#324: Aggregate template graph template JavaScript error
issue#352: Add configurable auto-logout and page-reload options
issue#329: Customize the favicon
issue#334: primary key on poller output boost table not efficient/not being used correctly
issue: Fixed issues with Dark theme
issue: Fixed issues with Paw theme
issue: Fix timespan calculation
issue: Added misplaced join condition when generating RRDTool graphs
issue: Fix the selection of timestan based on local_graph_id and rra_id
issue: Correct error in discovery not adding devices
issue: Action message did not always display
issue: fix regex to use Domains like www.t-online.de
issue: Properly align Order columns.
issue: address renaming issues with tree items.
issue: Add device snmp --version is ambiguous
issue: SNMP Availability failed to report down devices - This only was occuring for cmd.php collector.
issue: i18n remove embedded HTML syntax
issue: Wrap menu items to avoid scrolling

1.0.3

issue#297: Upgrade 0.8.8h to 1.0.0 fails to create poller_output_boost table
issue: Added missing template import hash for 1.0.2

1.0.2

issue#278: Correct Boost Status display issue
issue#275: Permission View issue and Device Dropdown when in Classic Theme
issue#270: Major Mib Cache corruption. Rebuild your MIB Cache after upgrading
issue: Resolve Cacti logo on Graphs page in Classic Theme

1.0.1

feature: SpikeKill allows filling range to last known good value
issue#261: Add IPv4 and IPv6 Specific Counters to interfaces.xml
issue#257: Poller Output Table not Empty WARNING messages in cacti.log
issue#256: New Graph - Add Graph Items Fails (Data Sources shows None)
issue#255: Errors Creating new Graphs - Undefined Index Errors
issue#254: Unable to Properly add Data Source
issue#251: Remote Data Collector stuck on upgrade page
issue#247: Devices missing from tree device list
issue#245: Drag and Drop in Tree Edit Erratic
issue#243: SMTP Ping Failure with not SNMP Authentication
issue#241: Authentication Method: None not functional
issue#240: SQL error when install plugin
issue#238: Duplicate color id's cause error during Upgrade
issue#231: SNMPv3 - PHP ERROR WARNING: Fatal error: Unknown user name in file
issue: Resolving visual issues with row counts.
issue: When deleting Graphs prevent the removal of Data Sources that are still in use
issue: Improve SNMP agent performance through SQL optimizations

Important Security Fixes

CVE-2014-4000 PHP Object Injection Vulnerabilities
CVE-2016-2313 allows remote authenticated users who use web authentication to bypass intended access

1.0.0

feature: Support for remote data collectors
feature: Support Internationalization (i18n) for the main Cacti site, and supported plugins
feature: Data Source Profiles replace RRA settings allowing a single system to have multiple polling intervals
feature: Redesigned Tree page including Drag & Drop functionality
feature: New Graph Permissions system designed to make permissions simple to manage
feature: Add Themes 'Classic', 'Modern', 'Dark', and 'Paw'
feature: Debug Data Sources by comparing them to the Data Template
feature: New special Data Source type to detect the poller interval
feature: Bulk inserts in PHP poller to address latency issues
feature: Optimize data collection through in memory caching giving a 50% reduction in polling times when dealing with large sites
feature: Support RRDtool VDEFs
feature: Support new Graph Items: AREA:STACK, GPRINT:AVERAGE, GPRINT:LAST, GPRINT:MAX, GPRINT:MIN, LINE:STACK, TEXTALIGN, TICK
feature: Support RRDtool features: Right Axis Support, Dynamic Labels, Tab Width, Legend Position, Legend Direction
feature; Resizeable table columns
feature: Deprecated Single Pane Tree View
feature: Role Based Access Control (RBAC)
feature: Support User Group Permissions
feature: Show number of in use Graphs, Data Sources, and Devices for a given Template
feature: Support bulk re-sync of graphs to assigned Graph Template
feature: Bulk Device Settings changes
feature: CDEFs, Colors, GPrint Presets consolidated to Presets menu
feature: Authentication cookies for 'remember me' functionality
feature: Automatic logout after session inactivity
feature: Replace Boost server in favor of RRDtool Proxy
feature: Graph Details include CSV output, zoom, debug, and download links
feature: Graph Export moved to a plugin
feature: User change password functionality
feature: Automation added to core functionality through the merge of the Discovery and AutoM8 plugins
feature: Change interface graphs from 32 bit to 64 bit with ease
feature: Plugins now have hooks in device templates and automation
feature: Allow users to preview template imports to determine if there will be issues from importing
feature: Automatic removal of orphaned graph items when importing newer versions of graph templates
feature: Support for MySQL 5.7
feature: Support for PHP 7.0
feature: Merge Aggregate Plugin - Aggregate graph creation
feature: Merge AutoM8 Plugin - Automation of graph creation
feature: Merge Boost Plugin - Faster polling, result caching, on-demand RRDtool file updates
feature: Merge CLog Plugin - View Cacti logs
feature: Merge Discovery Plugin - Device discovery
feature: Merge Domains Plugin - Support for domain (ADS/LDAP) specific user templates
feature: Merge DSStats Plugin - Cache Data Source values for easy retrieval
feature: Merge Logrotate Plugin - Rotate Cacti logs
feature: Merge Realtime Plugin - Realtime graph viewing
feature: Merge Reporting (Nectar) Plugin - Reporting
feature: Merge RRDclean Plugin - RRD file cleanup and management
feature: Merge Secpass Plugin - User password policy enforcement
feature: Merge Settings Plugin - Shared settings for plugins
feature: Merge SNMP Agent Plugin - SNMP Agent for Cacti providing system statistics
feature: Merge SpikeKill Plugin - Remove unwanted spikes from graphs
feature: Merge SSL Plugin - Force https
feature: Merge SuperLinks Plugin - Add external links within Cacti
feature: Merge UGroup Plugin - User groups with permissions
feature: Merge Watermark Plugin - Watermark your Cacti graphs
bug: Fixed issue where old graph templates (0.8.6-), could import bogus data causing issues with Data Input Methods
bug#0000168: Duplicate data sources should be avoided when creating new graphs
bug#0000851: Review an imported template
bug#0001155: When viewing graph tree do not show empty nodes
bug#0001337: Form to filter for graphs in host view mode
bug#0001552: Date ranges not shown on graphs in the view with Daily, Weekly, Monthly & Yearly graphs
bug#0001573: RRA templates/grouping
bug#0001577: Override session handling and store session in Database
bug#0001790: Allow for XML delimiter in fields of a script query
bug#0001820: Unable to use a Data Input Method Output Field in more than one Data Source Item
bug#0001827: Changing the graph template messes up the graph item fields
bug#0001836: Add mysql error message to log
bug#0001877: Cookies path is not properly set
bug#0001966: Expand Devices in tree view not honored
bug#0001970: Data query index order cache should be populated on re-index
bug#0001981: Cacti is not full UTF-8
bug#0001986: CLI allow add_graphs.php to have multiples --snmp-field and --snmp-value options
bug#0001996: Allow using data input field in graph title
bug#0002096: Enumerated SNMP values not parsed correctly
bug#0002112: CLI add configurable parameters for device_add.php
bug#0002133: Restrict User to only manage specific device(s)
bug#0002135: Regular expression support for filter
bug#0002137: Data query oid_suffix parameter does not function
bug#0002159: Database creation file not fully compliant with strict SQL mode
bug#0002162: Unable to authenticate user with password containing UTF-8
bug#0002196: Incorrect script server instance number in log
bug#0002225: Make -Cc SNMP option configurable
bug#0002255: Script query_unix_partitions.pl should only query local mounts
bug#0002336: Implement php-snmp class library
bug#0002340: Data query script execution should be escaped
bug#0002350: SNMP Data Query index_order ignored
bug#0002351: Ping does not work with non-English locale
bug#0002361: Spine does not log unknowns the same way cmd.php
bug#0002362: Poller cmd.php makes wrong hex-string to decimal conversion
bug#0002370: Cacti prints wrong date formats, does not honor a systems locale
bug#0002403: Typo in DELETE statement leading to poor graphing performance
bug#0002412: Graph Template duplication causes to be converted to TAB char
bug#0002418: Data Source Items named 'ds' break UI ability to add more items
bug#0002419: SNMP enum results not parsed correctly by cmd.php poller
bug#0002452: CVE-2014-4000 PHP Object Injection Vulnerabilities
bug#0002454: OS Command Injection
bug#0002468: Changing graph format to anything but PNG causes no output
bug#0002476: Add support for SNMP v3 EngineID
bug#0002483: Cisco ASA using Re-index method of verify all causes recache event every time
bug#0002484: Incorrect SQL request in cli script repair_database.php
bug#0002521: Unable to create two devices via CLI with the same IP-Address
bug#0002522: Zero padded hex strings are parsed incorrectly
bug#0002535: Graph Template Changes not updating RRDTool command
bug#0002636: Creating Data Template with "U" for min and max saves field data_input_field_id as 0 for first item
bug#0002697: CVE-2016-2313 allows remote authenticated users who use web authentication to bypass intended access
bug#0002698: When the host is down the wrong data type are used for some columns in the host table
bug#0002723: Renaming a disabled device still attempts to connect and get SNMP host information
bug#0002724: Multipage graphs the menu can disappear
bug#0002725: Changing graph template does not mark correct interfaces disabled on data query generated list

The following Cacti releases are end of life. We believe that release is stable. So, if for some reason you can not use Cacti 1.x, this version is preserved here for your reference.

Cacti 0.8.8h

Spine 0.8.8h

0.8.8h

bug:0002656: Authentication using web authentication as a user not in the cacti database allows complete access (regression)
bug:0002667: Cacti SQL Injection Vulnerability
bug:0002666: When click the [Clear] button after clicking the [Refresh] button in Preview Mode , fails to CSRFcheck
bug:0002673: CVE-2016-3659 - Cacti graph_view.php SQL Injection Vulnerability
bug:0002676: Outdated MIBs for non-unicast packets
bug:0002677: Index is a MySQL 5.6 reserved word
bug:0002681: generate_graph_def_name() generates reserved word "cf"

0.8.8g

 
bug:0002161: Graph management "graph()" function conflicts with graphviz PECL extension graph()
bug:0002320: Unable to delete more than 500 graphs at once
bug:0002591: graph_view.php - unable to advance to Next Page in Tree View
bug:0002608: cacti 0.8.8f - Data Templates - Poller/script issue with backslash
bug:0002618: bug/syntax error in html_utility.php
bug:0002616: cdef.php -- Extra php closing tag
bug:0002617: PHP Warning is thrown when trying to include auth_login.php
bug:0002623: log warning display wrong time_interval
bug:0002627: Graph tree doesn't work in Internet Explorer
bug:0002601: graphs_new.php query not sorted as per definition xml:index_order
bug:0002625: Plugins don't display the next page
bug:0002631: RRDtool export not XML compliant - results in empty CSV exports
bug:0002622: graph_view.php -- Navigation and Content Areas are not visible in Tree Mode
bug:0002626: Unable to add two users in a row - Notice: Undefined index: id
bug:0002620: Unable to copy user
bug:0002618: bug/syntax error in html_utility.php
bug:0002646: SQL injection in graph.php
bug:0002656: Authentication using web authentication as a user not in the cacti database allows complete access
bug:0002647: 0.8.8g rev 7767 Can add cacti devices to graph tree "Save Failed"
bug:0002652: CVE-2015-8604: SQL injection in graphs_new.php
bug:0002655: CVE-2015-8377: SQL injection vulnerability in the host_new_graphs_save function in graphs_new.php
bug:0002629: Cacti lacks tab icons in chrome from android
bug:0002619: Fix incorrect placement of htmlspecialchars() in tree.php
bug:0002642: ping.pl does not take into account host port numbers
bug:0002567: RRDTool 1.5.x Support
bug:0002269: |query_ifSpeed| in --upper-limit for graph template does not work with empty ifSpeed

0.8.8f

 
bug:0002599: 0.8.8e Poller Script Parser is Broken
bug:0002600: cli/upgrade_database.php is missing releases
bug:0002603: Graph managment graphs.php save button does not work
bug:0002599: Poller Script Parser is Broken

0.8.8e

 
bug: Fixed issue with graph zooming failing to work
bug: Fixed various SQL Injection vectors
bug#0002569: Impossible to have a URL pointing directly to a graph
bug#0002574: SQL Injection Vulnerabilities in graph items and graph template items
bug#0002577: CVE-2015-4634 - SQL injection in graphs.php
bug#0002579: SQL Injection Vulnerabilities in data sources
bug#0002580: SQL Injection in cdef.php
bug#0002582: SQL Injection in data_templates.php
bug#0002583: SQL Injection in graph_templates.php
bug#0002584: SQL Injection in host_templates.php
bug#0002586: Cannot delete data sources from the GUI
bug#0002592: graph_view.php - viewing host in new tab - Undefined index: nodeid
bug#0002594: status_fail_date and status_rec_date are set incorrectly after host is marked down
bug#0002597: Incorrect value in Hosts column on Host Templates page
bug#0002598: Incorrect row number in Devices -> (Edit) page

0.8.8d

feature: Remove un-needed fonts and javascript files
bug: Fixed SQL injection VN: JVN#78187936 / TN:JPCERT#98968540
bug#0002261: PHP 5.4.0 added new error_reporting variable, causing cacti to show errors
bug#0002391: Odd Behaviour on ReIndex of Data Query Data
bug#0002393: Broken thumbnail images for graph templates
bug#0002402: Subtree must not have the same header as the parent header
bug#0002474: CLI add_device.php dows not set availability_method correctly
bug#0002449: The Save button does not work: Invalid html on page Console -> Cacti Settings: empty form tag
bug#0002428: Fail to delete all data input items when removing more than 1000 data sources
bug#0002439: Password with special character don't work with LDAP authentication
bug#0002461: invalid bn with ldap and anonymous bind
bug#0002465: Graph Export return empty CSV file
bug#0002484: Incorrect SQL request in cli script repair_database.php
bug#0002485: Broken pagenation on graph viewing
bug#0002489: SNMP - Get Mounted Partitions using Re-index method of Index Count Changed causes recache event every time
bug#0002490: Can not select page for multiple datasources per device
bug#0002494: CSV export always shows last day
bug#0002504: Data template search not functional
bug#0002542: [FG-VD-15-017] Cacti Cross-Site Scripting Vulnerability Notification
bug#0002543: Unable to switch pages within graphs_new.php due to invalid URL generation
bug#0002544: Duplicate entry in $nav_url during list view
bug#0002571: SQL Injection and Location header injection from cdef id CVE-2015-4342
bug#0002572: SQL injection in graph templates

0.8.8c

 
bug#0002228: GPL incompatible files included in Cacti project in include/treeview
bug#0002383: Sanitize the step and id variables CVE-2013-5588, CVE-2013-5589
bug#0002385: Cannot export host templates while including dependencies
bug#0002386: cli/upgrade_database.php is missing the last two releases
bug#0002390: Poller/script issue with slash and backslash
bug#0002405: SQL injection in graph_xport.php
bug#0002431: CVE-2014-2326 Unspecified HTML Injection Vulnerability
bug#0002432: CVE-2014-2327 Cross Site Request Forgery Vulnerability - Special Thanks to Deutsche Telekom CERT
bug#0002433: CVE-2014-2328 Unspecified Remote Command Execution Vulnerability
bug#0002434: Suppress SNMP UNITS Suffix from cacti_snmp_get() output
bug#0002438: Down Host Detection issue when using SNMP Desc or SNMP getNext
bug#0002446: Subtract plugin processing time from Poller sleep time
bug#0002453: CVE-2014-4002 Cross-Site Scripting Vulnerability - Special Thanks to G. Geshev (munmap)
bug#0002455: Incomplete and incorrect input parsing leads to remote code execution and SQL injection attack scenarios
bug#0002456: CVE-2014-5025 / CVE-2014-5026 - Cross-Site Scripting Vulnerability - Special Thanks to Adan Alvarez and Paul Gevers
bug: Fix COMMENT handling, even in case COMMENT is empty, with or without HR and with variable substitution
bug: Fix issues when SNMP data holds a "="; "explode" must be treated accordingly
bug: Fix filter highlighting on data sources for the data template field
bug: correct description of SNMP V3 parameters
feature: Added native jquery, jqueryui, and jstree
feature: Fixed issues with 'Clear' under preview not working
feature: Added new Tree navigation
feature: Added Columns and Thumbnails to Preview
feature: Added Columns to Tree (Preview only)
feature: Both Graphs and Columns default to 'Default'
feature: Resolved Left hand navigation taking entire page
feature: Added new graph zoom to tree view and preview offering a "quick" (default) and an "advanced" mode

0.8.8b

 
bug: Fixed issue with custom data source information being lost when saved from edit
bug: Repopulate the poller cache on new installations
bug: Fix issue with poller not escaping the script query path correctly
bug: Allow snmpv3 priv proto none
bug: Fix issue where host activate may flush the entire poller item cache
security: SQL injection and shell escaping issues

0.8.8a

 
bug#0002207: cannot export graph templates
bug#0002208: Graphs with CDEFs fail to generate
bug#0002209: External auth does not work behind a reverse proxy
bug#0002211: creating an index USING BTREE fails ony MySQL < 5.0.60
bug#0002213: CLI upgrade script is missing 0.8.7i as a target
bug#0002214: SQL error during non-PIA upgrade to 088 when giving a default for a text field in plugin_realms
bug#0002216: use of define_syslog_variables() gone in PHP 5.4
bug#0002217: url_path should default to /cacti/
bug#0002221: Missing plugin directory causes endless loop in plugins.php
bug#0002222: tail_logfile hangs when cacti.log not readable, filling apache log with fgets warnings

0.8.8

 
bug#0002056: un-initialized datetime used for host status (was: Zero length string != NULL)
bug#0002081: In Graph Management, search display graph title breaks when using pattern symbol "/"
bug#0002132: need to include pa.sql with the 0.8.7i and future releases
bug#0002134: rebuild_poller_cache.php --host-id deletes table poller_item completely
bug#0002141: cacti.sql missing BTREE PRIMARY KEY for poller_output
bug#0002146: Utilities -> View Log File -> refresh does not work
bug#0002150: usort_data_query_index() is broken -> graph order for hosts with data query sort option fails
bug#0002151: When building HTML forms with sub_checkbox on_change parameter is not used
bug#0002152: Issue with filter on graphs_new.php
bug#0002153: Cant search for patterns containing a forward-slash
bug#0002156: CDEF strings are not escaped before passed to rrdtool command
bug#0002158: Minor changes to grammar of displayed messages
bug#0002165: Using data input field in data source name (related to 2079 in 0.8.7i)
bug#0002167: New poller hook poller_finishing
bug#0002172: structure_rra_paths.php does not handle disabled data sources
bug#0002174: poller_item.host_id has wrong type
bug#0002178: typo in include/global_form.php: Mimimum -> Minimum
bug#0002181: session_unregister (use in functions.php) doesn't exist anymore in PHP 5.4
bug#0002182: When there is no suitable (unique) index, graphs are not shown in data query ordering on host leafs
bug#0002189: Proper graph hooks
bug#0002191: Refresh issues
bug#0002194: changing data query XML does not propagate to existing data sources
bug: Fix input validation on cli/api_device.php
bug: Fix issue with data source template associate command line script inserting incorrect rra information
bug: Fix minor display issue on data source pages
bug: Fix minor issue with counting items in the poller_output table
bug: Graph settings and settings check boxes do not allow unchecking to be saved
bug: Fix minor issue with plugin library caused by non-session
bug: Fix SQL error on data input save for non-templated graphs
bug: user_log index added to increase performance
feature: Merge Plugin Architecture into Cacti
feature: Added index to data_template_data to increase performance

0.8.7i

 
bug#0001963: Bandwidth summation "total in" and "total out" are always 0
bug#0002040: ICMP ping errors for Windows 7 with PHP 5.3
bug#0002062: Multiple security vulnerabilities
bug#0002063: Multiple value poller output incorrectly interpreted as hexadecimal value
bug#0002064: Removing "~" (tilde) by sanitize_uri() conflicts with Apache UserDir translation
bug#0002066: Graph without host id "Notice: Undefined variable: host_id"
bug#0002067: Custom time range filter not working
bug#0002068: Missing header include in analyze_database.php
bug#0002071: MySQL table poller_item is dropped always when "Data Input Method" is changed or added.
bug#0002079: Using input field of a script in graph title does not work
bug#0002080: Database password containing "@" does not connect
bug#0002083: Adding a new users generates errors in apache logs
bug#0002084: Incorrect normalization of hrStorageTable values over 2^31
bug#0002086: Incorrect usage of mysql custom tcp port
bug#0002087: PHP recache problems due to missing slashes in reindex table
bug#0002093: Unit exponent value of 0 not imported with graph template
bug#0002094: CDEF: "another cdef" references not included in template export
bug#0002106: Command line add device does not accept "None" for host template
bug: Update host template cli script help to fix incorrect options
bug: Refresh of Cacti log viewer not working
bug: Problems saving User Graph Permissions in IE9
bug: Bandwidth summation fails if NAN values are present
bug: Special Type Code "host_id" available in Data Queries by Not Data Input Methods
bug: Do not generate error messages when creating non host based graphs
bug: Wrong index used for Data Queries using VALUE/REGEXP
bug: Fix issue with title variable replacement failing when no host is associated with graph
bug: Cacti generating MySQL 1100 Errors when modifying the tree
bug: Resolved "Fatal error: Cannot use string offset as an array" in lib/data_query.php
feature: Properly support ifHighSpeed replacement variable
feature: Increase granularity of availability options to correct spine bug
feature: Replace "event count" with last changed date for host availability

0.8.7h

 
bug#0001403: Reapply Suggested Names does not work correctly for graphs and data sources not associated with Data Queries
bug#0001568: Remove PHP 5.3 deprecated functions
bug#0001584: Concurrent changes to graph tree ordering can corrupt sort values
bug#0001626: Symbol ($) does not appear in labels/gprint strings to rrdtool during graph generation
bug#0001632: Script server treats quoted arguments with spaces incorrectly as multiple separate arguments
bug#0001646: MySQL SSL connection support
bug#0001660: Modifying data template values does not propagate as expected
bug#0001678: Adding graphs to a device fails to add entries to poller_item if using the script server
bug#0001768: Perform consistency check on ds maximum vs. ds minimum
bug#0001783: Graph Export export date is incorrect
bug#0001812: Data template copying ignores some item templating
bug#0001814: Command line device add script fails when SNMP default is disabled
bug#0001815: One minute polling not working correctly
bug#0001816: Cannot export graph data to CSV with IE 8
bug#0001819: MySQL "TYPE=" command deprecated since MySQL 4.1 removed in MySQL 5.4.4
bug#0001826: Zoomed graph views should auto refresh
bug#0001828: Reapply Suggested Name prompt as spelling problems
bug#0001835: Graph edit page has more than one html form tag
bug#0001847: Graph export API function has required argument not defined
bug#0001851: Graph creation selector does not work with data query that has no associated graph templates
bug#0001855: Improper formatting of data queries can result in SQL errors
bug#0001862: Ping script does not process output of update ping utility
bug#0001867: RRDtool Cacti fetch function does not work for some locales
bug#0001876: PHP function strip_quotes causes HEX values to be truncated
bug#0001880: Form validation error message does not highlight text area control
bug#0001882: Cacti snmp_walk function fails if max_oids is an empty value
bug#0001890: Default tree view mode set to single pane mode not working
bug#0001893: Data input method description text does not make sense
bug#0001900: Equal sign not correctly parsed in snmp data results
bug#0001903: Undefined variable: mode in lib/ldap.php on line 375
bug#0001918: Script server does not accept more than one blank space before the function name
bug#0001926: Importing templates "using defaults for this installation" associates all rra's defined
bug#0001928: graph_image.php does not check local_graph_id
bug#0001929: Error when exporting templates are not properly reported
bug#0001930: No error reporting for wrong RRA
bug#0001934: Poller does not process SIGTERM signal correctly
bug#0001936: Removing multiple data sources is inefficient
bug#0001937: Technical support page uses check table which waits for table lock
bug#0001939: Do not query for number or items per host if concurrent polling processes is set to one
bug#0001954: Usage of PHP_SELF without basename in html.php (at least partly fixed)
bug#0001956: Attempts to update existing tree item fail
bug#0001967: Reflected XSS on Cacti 0.8.7g
bug#0001989: IE9 breaks Cacti when objects are hidden using 'display:none;' style tag
bug#0001993: Undefined index in lib/html.php
bug#0001995: REQUEST_URI not properly escaped in graph_view.php for preview mode
bug#0002005: Saving Script Server or Script Data Input Method Results in SQL Error
bug#0002060: NAN values in hdd utilization graphs (Poller Output Table not Empty)
bug: Fix SQL injection issues in login page
bug: RRDtool fetch in Cacti fails to function properly on rrdtool files with NaN values in the output
bug: Accept "Connection refused" on TCP ping tests
bug: Add missing row selection javascript to graph preview
bug: Script server throws "undefined variable" error when in debug mode
bug: Removing graphs does not take advantage of bulk deletes
bug: Fixed issue with multiple "U" results for a data input method with multiple output parameters
bug: SNMP v3 use AuthNoPriv when privacy passphrase is empty
bug: Fixed sql errors when using template and search filter on graph management
bug: Delete Data Source multi fails to perform bulk deletes on Data Source items
bug: Allow Timespan Selector to work with $_REQUEST as well as $_POST
bug: While in the mrtg view of Cacti Graphs, or in viewing graph properties zoom fails
bug: The filepath api call should trim the filename before checking for the files existence
bug: Fix issues with IE9 while editing templates
bug: Form action in graph_items.php incorrect
bug: Initial drawing of tree causing Next/Previous with malformed URI
feature#0001519: Spine enhancement for parallel collection of data at device level
feature#0001667: Get values of |host_*| variables in graph elements from data source
feature#0001922: Reindex method "Index Count Changed" requires that OID_NUM_INDEXES is given for SNMP Data Queries
feature#0001923: Implement counting for script (server) data queries just like OID_NUM_INDEXES
feature#0001924: Allow for reindex method "Index Count Changed" to apply to script (server) queries as well
feature#0001952: Ability to use input field of a script in graph title
feature: Make reindexing and repopulating the poller cache a lossless process
feature: Change default font sizes
feature: Add analyze database and push out host cli scripts

TheWitness has created a couple of walk-through videos for pending 1.0 releases.

You can see them on the bottom of the aggregate and flowview pages

— Linegod 2011/01/04 21:21