# CVEs published 2015-03-25

12 CVEs were published on March 25, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2014-9711](https://cve.now/CVE-2014-9711.md): Multiple cross-site scripting (XSS) vulnerabilities in the Investigative Reports in Websense TRITON AP-WEB before 8.0.0 and Web Security… (no CVSS)
- [CVE-2015-0295](https://cve.now/CVE-2015-0295.md): The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote… (no CVSS)
- [CVE-2015-2316](https://cve.now/CVE-2015-2316.md): The utils.html.strip\_tags function in Django 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1, when using certain versions… (no CVSS, django)
- [CVE-2015-2317](https://cve.now/CVE-2015-2317.md): The utils.http.is\_safe\_url function in Django before 1.4.20, 1.5.x, 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1 does… (no CVSS, django)
- [CVE-2015-2559](https://cve.now/CVE-2015-2559.md): Drupal 6.x before 6.35 and 7.x before 7.35 allows remote authenticated users to reset the password of other accounts by leveraging an… (no CVSS)
- [CVE-2015-2701](https://cve.now/CVE-2015-2701.md): Cross-site request forgery (CSRF) vulnerability in CS-Cart 4.2.4 allows remote attackers to hijack the authentication of users for… (no CVSS)
- [CVE-2015-2702](https://cve.now/CVE-2015-2702.md): Cross-site scripting (XSS) vulnerability in the Message Log in the Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 and… (no CVSS)
- [CVE-2015-2703](https://cve.now/CVE-2015-2703.md): Multiple cross-site scripting (XSS) vulnerabilities in Websense TRITON AP-WEB before 8.0.0 and V-Series 7.7 appliances allow remote… (no CVSS)
- [CVE-2014-6134](https://cve.now/CVE-2014-6134.md): IBM Rational ClearCase 8.0.0 before 8.0.0.14 and 8.0.1 before 8.0.1.7, when Installation Manager before 1.8.2 is used, retains cleartext… (no CVSS)
- [CVE-2014-8923](https://cve.now/CVE-2014-8923.md): The (1) IBM Tivoli Identity Manager Active Directory adapter before 5.1.24 and (2) IBM Security Identity Manager Active Directory adapter… (no CVSS)
- [CVE-2014-8925](https://cve.now/CVE-2014-8925.md): Cross-site request forgery (CSRF) vulnerability in ClearQuest Web in IBM Rational ClearQuest 7.1.x before 7.1.2.17, 8.0.0.x before… (no CVSS)
- [CVE-2015-0138](https://cve.now/CVE-2015-0138.md): GSKit in IBM Tivoli Directory Server (ITDS) 6.0 before 6.0.0.73-ISS-ITDS-IF0073, 6.1 before 6.1.0.66-ISS-ITDS-IF0066, 6.2 before… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2015-03-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.