The CVE numbers listed here are all reported for the proprietary RealPlayer application. Red Hat, at least, believes that some of these vulnerabilities may also be present in HelixPlayer, but there is no way to know for sure. In response, Red Hat has removed the player as a "critical" update.