A cross-site scripting vulnerability exists in Cacti 1.1.17 in the method parameter in spikekill.php.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-12927.json"