# CVEs published 2015-04-03

30 CVEs were published on April 3, 2015: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2015-0612](https://cve.now/CVE-2015-0612.md): The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8.5(1)SU6, 8.6 before 8.6(2a)SU4, and 9.x… (no CVSS)
- [CVE-2015-0613](https://cve.now/CVE-2015-0613.md): The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.6(2a)SU4, 9.x… (no CVSS)
- [CVE-2015-0614](https://cve.now/CVE-2015-0614.md): The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.6(2a)SU4, 9.x… (no CVSS)
- [CVE-2015-0615](https://cve.now/CVE-2015-0615.md): The call-handling implementation in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.6(2a)SU4, 9.x before 9.1(2)SU2, and 10.0… (no CVSS)
- [CVE-2015-0616](https://cve.now/CVE-2015-0616.md): The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.6(2a)SU4, and 9.x… (no CVSS)
- [CVE-2015-0225](https://cve.now/CVE-2015-0225.md): The default configuration in Apache Cassandra 1.2.0 through 1.2.19, 2.0.0 through 2.0.13, and 2.1.0 through 2.1.3 binds an unauthenticated… (no CVSS, org.apache.cassandra:apache-cassandra)
- [CVE-2015-2838](https://cve.now/CVE-2015-2838.md): Cross-site request forgery (CSRF) vulnerability in Nitro API in Citrix NetScaler before 10.5 build 52.3nc allows remote attackers to… (no CVSS)
- [CVE-2015-2839](https://cve.now/CVE-2015-2839.md): The Nitro API in Citrix NetScaler before 10.5 build 52.3nc uses an incorrect Content-Type when returning an error message, which allows… (no CVSS)
- [CVE-2015-2840](https://cve.now/CVE-2015-2840.md): Cross-site scripting (XSS) vulnerability in help/rt/large\_search.html in Citrix NetScaler before 10.5 build 52.3nc allows remote attackers… (no CVSS)
- [CVE-2015-2841](https://cve.now/CVE-2015-2841.md): Citrix NetScaler AppFirewall, as used in NetScaler 10.5, allows remote attackers to bypass intended firewall restrictions via a crafted… (no CVSS)
- [CVE-2014-5400](https://cve.now/CVE-2014-5400.md): Hospira MedNet Password in Configuration File (no CVSS, Hospira MedNet)
- [CVE-2014-5403](https://cve.now/CVE-2014-5403.md): Hospira MedNet Use of Hard-coded Cryptographic Key (no CVSS, Hospira MedNet)
- [CVE-2014-5405](https://cve.now/CVE-2014-5405.md): Hospira MedNet Use of Hard-coded Password (no CVSS, Hospira MedNet)
- [CVE-2014-8390](https://cve.now/CVE-2014-8390.md): Multiple buffer overflows in Schneider Electric VAMPSET before 2.2.168 allow local users to gain privileges via malformed… (no CVSS)
- [CVE-2015-0666](https://cve.now/CVE-2015-0666.md): Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote atta (CVSS 7.5, KEV)
- [CVE-2015-0682](https://cve.now/CVE-2015-0682.md): Cisco Unified Communications Domain Manager 8.1(4) allows remote authenticated users to execute arbitrary code by visiting a "deprecated… (no CVSS)
- [CVE-2015-0683](https://cve.now/CVE-2015-0683.md): Cisco Unified Communications Domain Manager 8.1(4) allows remote authenticated users to obtain sensitive information via a file-inclusion… (no CVSS)
- [CVE-2015-0684](https://cve.now/CVE-2015-0684.md): SQL injection vulnerability in the Image Management component in Cisco Unified Communications Domain Manager 8.1(4) allows remote… (no CVSS)
- [CVE-2015-0902](https://cve.now/CVE-2015-0902.md): The Semper Fi All in One SEO Pack plugin before 2.2.6 for WordPress does not consider the presence of password protection during… (no CVSS)
- [CVE-2015-0903](https://cve.now/CVE-2015-0903.md): Buffer overflow in Saitoh Kikaku Maruo Editor 8.51 and earlier allows remote attackers to execute arbitrary code via a crafted .hmbook file. (no CVSS)
- [CVE-2015-0976](https://cve.now/CVE-2015-0976.md): Cross-site scripting (XSS) vulnerability in Inductive Automation Ignition 7.7.2 allows remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2015-0990](https://cve.now/CVE-2015-0990.md): Untrusted search path vulnerability in Ecava IntegraXor SCADA Server before 4.2.4488 allows local users to gain privileges via a renamed… (no CVSS)
- [CVE-2015-0991](https://cve.now/CVE-2015-0991.md): Inductive Automation Ignition 7.7.2 allows remote attackers to obtain sensitive information by reading an error message about an unhandled… (no CVSS)
- [CVE-2015-0992](https://cve.now/CVE-2015-0992.md): Inductive Automation Ignition 7.7.2 stores cleartext OPC Server credentials, which allows local users to obtain sensitive information via… (no CVSS)
- [CVE-2015-0993](https://cve.now/CVE-2015-0993.md): Inductive Automation Ignition 7.7.2 does not terminate a session upon a logout action, which allows remote attackers to bypass intended… (no CVSS)
- [CVE-2015-0994](https://cve.now/CVE-2015-0994.md): Inductive Automation Ignition 7.7.2 allows remote authenticated users to bypass a brute-force protection mechanism by using different… (no CVSS)
- [CVE-2015-0995](https://cve.now/CVE-2015-0995.md): Inductive Automation Ignition 7.7.2 uses MD5 password hashes, which makes it easier for context-dependent attackers to obtain access via a… (no CVSS)
- [CVE-2015-0685](https://cve.now/CVE-2015-0685.md): Cisco IOS XE before 3.7.5S on ASR 1000 devices does not properly handle route adjacencies, which allows remote attackers to cause a denial… (no CVSS)
- [CVE-2015-0686](https://cve.now/CVE-2015-0686.md): The SNMP implementation in Cisco NX-OS 6.1(2)I2(3) on Nexus 9000 devices, when a Reset High Availability (HA) policy is configured, allows… (no CVSS)
- [CVE-2015-0687](https://cve.now/CVE-2015-0687.md): The SNMP implementation in Cisco IOS 15.1(2)SG4 on Catalyst 4500 devices, when single-switch Virtual Switching System (VSS) is configured… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2015-04-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.