# CVEs published 2014-05-25

3 CVEs were published on May 25, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-0639](https://cve.now/CVE-2014-0639.md): Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Archer 5.x before GRC 5.4 SP1 P3 allow remote attackers to inject arbitrary w (no CVSS)
- [CVE-2014-0943](https://cve.now/CVE-2014-0943.md): IBM WebSphere Commerce 6.0 Feature Pack 2 through Feature Pack 5, 7.0.0.0 through 7.0.0.8, and 7.0 Feature Pack 1 through Feature Pack 7 all (no CVSS)
- [CVE-2014-3284](https://cve.now/CVE-2014-3284.md): Cisco IOS XE on ASR1000 devices, when PPPoE termination is enabled, allows remote attackers to cause a denial of service (device reload) via (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-05-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.