# CVEs published 2015-03-20

8 CVEs were published on March 20, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-1802](https://cve.now/CVE-2015-1802.md): The bdfReadProperties function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 allows remote authenticated users… (no CVSS)
- [CVE-2015-1803](https://cve.now/CVE-2015-1803.md): The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly handle… (no CVSS)
- [CVE-2015-1804](https://cve.now/CVE-2015-1804.md): The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly perform type… (no CVSS)
- [CVE-2015-2562](https://cve.now/CVE-2015-2562.md): Multiple SQL injection vulnerabilities in the Web-Dorado ECommerce WD (com\_ecommercewd) component 1.2.5 for Joomla! allow remote attackers… (no CVSS)
- [CVE-2015-2563](https://cve.now/CVE-2015-2563.md): SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 0.9.9 and 1.2.3 allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2015-2564](https://cve.now/CVE-2015-2564.md): SQL injection vulnerability in client-edit.php in ProjectSend (formerly cFTP) r561 allows remote authenticated users to execute arbitrary… (no CVSS)
- [CVE-2015-0668](https://cve.now/CVE-2015-0668.md): Cross-site scripting (XSS) vulnerability in the administration portal in Cisco WebEx Meetings Server 2.5 and 2.5.99.2 allows remote… (no CVSS)
- [CVE-2015-0671](https://cve.now/CVE-2015-0671.md): The DNS implementation in Cisco Videoscape Distribution Suite for Internet Streaming (VDS-IS) 3.2(1) allows remote attackers to cause a… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2015-03-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.