# CVEs published 2015-01-01

34 CVEs were published on January 1, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2011-5294](https://cve.now/CVE-2011-5294.md): The SaveMessage method in the LEADeMail.LEADSmtp.20 ActiveX control in LTCML14n.dll 14.0.0.34 in Kofax e-Transactions Sender Sendbox 2.5.0.9 (no CVSS)
- [CVE-2011-5295](https://cve.now/CVE-2011-5295.md): Buffer overflow in the Download method in a certain ActiveX control in MDIEEx.dll in Gogago YouTube Video Converter 1.1.6 allows remote atta (no CVSS)
- [CVE-2011-5296](https://cve.now/CVE-2011-5296.md): Cross-site scripting (XSS) vulnerability in profilo.php in Happy Chat 1.0 allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2011-5297](https://cve.now/CVE-2011-5297.md): Multiple cross-site scripting (XSS) vulnerabilities in TTChat 1.0.4 allow remote attackers to inject arbitrary web script or HTML via (1) th (no CVSS)
- [CVE-2011-5298](https://cve.now/CVE-2011-5298.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Argyle Social 2011-04-26 allow remote attackers to hijack the authentication o (no CVSS)
- [CVE-2011-5299](https://cve.now/CVE-2011-5299.md): Multiple cross-site scripting (XSS) vulnerabilities in poMMo Aardvark PR16.1 allow remote attackers to inject arbitrary web script or HTML v (no CVSS)
- [CVE-2011-5300](https://cve.now/CVE-2011-5300.md): Cross-site request forgery (CSRF) vulnerability in admin/setup/config/users.php in poMMo Aardvark PR16.1 allows remote attackers to hijack t (no CVSS)
- [CVE-2011-5301](https://cve.now/CVE-2011-5301.md): Multiple cross-site scripting (XSS) vulnerabilities in PHPDug 2.0.0 allow remote attackers to inject arbitrary web script or HTML via (1) th (no CVSS)
- [CVE-2011-5302](https://cve.now/CVE-2011-5302.md): Cross-site request forgery (CSRF) vulnerability in adm/admin\_edit.php in PHPDug 2.0.0 allows remote attackers to hijack the authentication o (no CVSS)
- [CVE-2011-5303](https://cve.now/CVE-2011-5303.md): Cross-site scripting (XSS) vulnerability in Spitfire CMS 1.0.436 allows remote attackers to inject arbitrary web script or HTML via a cms\_us (no CVSS)
- [CVE-2011-5304](https://cve.now/CVE-2011-5304.md): Multiple cross-site scripting (XSS) vulnerabilities in the Sodahead Polls plugin before 2.0.4 for WordPress allow remote attackers to inject (no CVSS)
- [CVE-2011-5305](https://cve.now/CVE-2011-5305.md): Multiple cross-site scripting (XSS) vulnerabilities in CosmoShop ePRO 10.05.00 allow remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2011-5306](https://cve.now/CVE-2011-5306.md): Cross-site request forgery (CSRF) vulnerability in cgi-bin/admin/setup\_edit.cgi in CosmoShop ePRO 10.05.00 allows remote attackers to hijack (no CVSS)
- [CVE-2011-5307](https://cve.now/CVE-2011-5307.md): Cross-site scripting (XSS) vulnerability in index.php in the PhotoSmash plugin 1.0.1 for WordPress allows remote attackers to inject arbitra (no CVSS)
- [CVE-2011-5308](https://cve.now/CVE-2011-5308.md): Multiple SQL injection vulnerabilities in cdnvote-post.php in the cdnvote plugin before 0.4.2 for WordPress allow remote attackers to execut (no CVSS)
- [CVE-2011-5309](https://cve.now/CVE-2011-5309.md): Cross-site scripting (XSS) vulnerability in pages.php in Wikipad 1.6.0 allows remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2011-5310](https://cve.now/CVE-2011-5310.md): Directory traversal vulnerability in pages.php in Wikipad 1.6.0 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2011-5311](https://cve.now/CVE-2011-5311.md): Cross-site request forgery (CSRF) vulnerability in pages.php in Wikipad 1.6.0 allows remote attackers to hijack the authentication of admini (no CVSS)
- [CVE-2011-5312](https://cve.now/CVE-2011-5312.md): Multiple cross-site scripting (XSS) vulnerabilities in Gollos 2.8 allow remote attackers to inject arbitrary web script or HTML via the retu (no CVSS)
- [CVE-2011-5313](https://cve.now/CVE-2011-5313.md): Multiple SQL injection vulnerabilities in includes/password.php in Redaxscript 0.3.2 allow remote attackers to execute arbitrary SQL command (no CVSS)
- [CVE-2011-5314](https://cve.now/CVE-2011-5314.md): templates/default/index.php in Redaxscript 0.3.2 allows remote attackers to obtain sensitive information via a direct request, which reveals (no CVSS)
- [CVE-2011-5315](https://cve.now/CVE-2011-5315.md): Cross-site request forgery (CSRF) vulnerability in admin/index.php in whCMS 0.115 alpha allows remote attackers to hijack the authentication (no CVSS)
- [CVE-2011-5316](https://cve.now/CVE-2011-5316.md): Cross-site request forgery (CSRF) vulnerability in admin/index.php in Cambio 0.5a nightly r37 allows remote attackers to hijack the authenti (no CVSS)
- [CVE-2011-5317](https://cve.now/CVE-2011-5317.md): Cross-site scripting (XSS) vulnerability in editText.php in WonderCMS before 0.4 allows remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2011-5318](https://cve.now/CVE-2011-5318.md): Multiple cross-site request forgery (CSRF) vulnerabilities in diafan.CMS before 5.1 allow remote attackers to hijack the authentication of a (no CVSS)
- [CVE-2011-5285](https://cve.now/CVE-2011-5285.md): Multiple cross-site scripting (XSS) vulnerabilities in BugFree 2.1.3 allow remote attackers to inject arbitrary web script or HTML via (1) t (no CVSS)
- [CVE-2011-5286](https://cve.now/CVE-2011-5286.md): SQL injection vulnerability in social-slider-2/ajax.php in the Social Slider plugin before 7.4.2 for WordPress allows remote attackers to ex (no CVSS)
- [CVE-2011-5287](https://cve.now/CVE-2011-5287.md): Multiple cross-site scripting (XSS) vulnerabilities in HESK before 2.4.1 allow remote attackers to inject arbitrary web script or HTML via t (no CVSS)
- [CVE-2011-5288](https://cve.now/CVE-2011-5288.md): Multiple buffer overflows in the ThreeDify.ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll in ThreeDify Designer 5.0.2 allow remote a (no CVSS)
- [CVE-2011-5289](https://cve.now/CVE-2011-5289.md): The SaveDecrypted method in the ChilkatCrypt2.ChilkatOmaDrm.1 ActiveX control in ChilkatCrypt2.dll in aTube Catcher 2.3.570 allows remote at (no CVSS)
- [CVE-2011-5290](https://cve.now/CVE-2011-5290.md): The SaveToFile method in the UniBasicPack.UniTextBox ActiveX control in UniBasic100\_EDA1811C.ocx in IDrive Online Backup 3.4.0 allows remote (no CVSS)
- [CVE-2011-5291](https://cve.now/CVE-2011-5291.md): The SaveData method in the Cygnicon.ViewControl.1 ActiveX control in CyViewer.ocx in Ashampoo 3D CAD Professional 3.x before 3.0.2 allows re (no CVSS)
- [CVE-2011-5292](https://cve.now/CVE-2011-5292.md): The EaseWeFtp.FtpLibrary ActiveX control in EaseWeFtp.ocx in Easewe FTP OCX 4.5.0.9 does not restrict access to certain methods, which allow (no CVSS)
- [CVE-2011-5293](https://cve.now/CVE-2011-5293.md): The cmdSave method in the ThreeDify.ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll in ThreeDify Designer 5.0.2 allows remote attacke (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-01-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.