# CVEs published 2015-03-12 20 CVEs were published on March 12, 2015: 0 critical, 0 high. Days are UTC. - [CVE-2015-2237](https://cve.now/CVE-2015-2237.md): Multiple SQL injection vulnerabilities in Betster (aka PHP Betoffice) 1.0.4 allow remote attackers to execute arbitrary SQL commands via… (no CVSS) - [CVE-2015-2275](https://cve.now/CVE-2015-2275.md): Cross-site scripting (XSS) vulnerability in WoltLab Community Gallery 2.0 before 2014-12-26 allows remote attackers to inject arbitrary… (no CVSS) - [CVE-2015-2044](https://cve.now/CVE-2015-2044.md): The emulation routines for unspecified X86 devices in Xen 3.2.x through 4.5.x does not properly initialize data, which allow local HVM… (no CVSS) - [CVE-2015-2045](https://cve.now/CVE-2015-2045.md): The HYPERVISOR\_xen\_version hypercall in Xen 3.2.x through 4.5.x does not properly initialize data structures, which allows local guest… (no CVSS) - [CVE-2015-2150](https://cve.now/CVE-2015-2150.md): Xen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly restrict access to PCI command registers, which might allow… (no CVSS) - [CVE-2015-2151](https://cve.now/CVE-2015-2151.md): The x86 emulator in Xen 3.2.x through 4.5.x does not properly ignore segment overrides for instructions with register operands, which… (no CVSS) - [CVE-2015-2208](https://cve.now/CVE-2015-2208.md): The saveObject function in moadmin.php in phpMoAdmin 1.1.2 allows remote attackers to execute arbitrary commands via shell metacharacters… (no CVSS) - [CVE-2015-2241](https://cve.now/CVE-2015-2241.md): Cross-site scripting (XSS) vulnerability in the contents function in admin/helpers.py in Django before 1.7.6 and 1.8 before 1.8b2 allows… (no CVSS, django) - [CVE-2015-2285](https://cve.now/CVE-2015-2285.md): The logrotation script (/etc/cron.daily/upstart) in the Ubuntu Upstart package before 1.13.2-0ubuntu9, as used in Ubuntu Vivid 15.04… (no CVSS) - [CVE-2015-0521](https://cve.now/CVE-2015-0521.md): Cross-site scripting (XSS) vulnerability in EMC RSA Certificate Manager (RCM) before 6.9 build 558 and RSA Registration Manager (RRM)… (no CVSS) - [CVE-2015-0522](https://cve.now/CVE-2015-0522.md): Cross-site scripting (XSS) vulnerability in EMC RSA Certificate Manager (RCM) before 6.9 build 558 and RSA Registration Manager (RRM)… (no CVSS) - [CVE-2015-0523](https://cve.now/CVE-2015-0523.md): EMC RSA Certificate Manager (RCM) before 6.9 build 558 and RSA Registration Manager (RRM) before 6.9 build 558 allow remote attackers to… (no CVSS) - [CVE-2015-0524](https://cve.now/CVE-2015-0524.md): SQL injection vulnerability in the Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) 3.02 and 3.03… (no CVSS) - [CVE-2015-0525](https://cve.now/CVE-2015-0525.md): The Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) 3.02 and 3.03 allows remote attackers to execute… (no CVSS) - [CVE-2015-1061](https://cve.now/CVE-2015-1061.md): IOSurface in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 allows attackers to execute arbitrary code in a… (no CVSS) - [CVE-2015-1062](https://cve.now/CVE-2015-1062.md): MobileStorageMounter in Apple iOS before 8.2 and Apple TV before 7.1 does not delete invalid disk-image folders, which allows attackers to… (no CVSS) - [CVE-2015-1063](https://cve.now/CVE-2015-1063.md): CoreTelephony in Apple iOS before 8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and device restart)… (no CVSS) - [CVE-2015-1064](https://cve.now/CVE-2015-1064.md): Springboard in Apple iOS before 8.2 allows physically proximate attackers to bypass an intended activation requirement and read the home… (no CVSS) - [CVE-2015-1065](https://cve.now/CVE-2015-1065.md): Multiple buffer overflows in iCloud Keychain in Apple iOS before 8.2 and Apple OS X through 10.10.2 allow man-in-the-middle attackers to… (no CVSS) - [CVE-2015-1066](https://cve.now/CVE-2015-1066.md): Off-by-one error in IOAcceleratorFamily in Apple OS X through 10.10.2 allows attackers to execute arbitrary code in a privileged context… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2015-03-12 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.