# CVEs published 2015-02-07

11 CVEs were published on February 7, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-0072](https://cve.now/CVE-2015-0072.md): Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Polic (no CVSS)
- [CVE-2014-9203](https://cve.now/CVE-2014-9203.md): Buffer overflow in the Field Device Tool (FDT) Frame application in the HART Device Type Manager (DTM) library, as used in MACTek Bullet DTM (no CVSS)
- [CVE-2015-0589](https://cve.now/CVE-2015-0589.md): The administrative web interface in Cisco WebEx Meetings Server 1.0 through 1.5 allows remote authenticated users to execute arbitrary OS co (no CVSS)
- [CVE-2015-0600](https://cve.now/CVE-2015-0600.md): The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to cause a denial of servic (no CVSS)
- [CVE-2015-0602](https://cve.now/CVE-2015-0602.md): The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to obtain sensitive informa (no CVSS)
- [CVE-2015-0871](https://cve.now/CVE-2015-0871.md): Cross-site scripting (XSS) vulnerability in Mrs. (no CVSS)
- [CVE-2013-5557](https://cve.now/CVE-2013-5557.md): The Proxy Bypass Content Rewriter feature in the WebVPN subsystem in Cisco Adaptive Security Appliance (ASA) Software 9.1(.2) and earlier al (no CVSS)
- [CVE-2015-0601](https://cve.now/CVE-2015-0601.md): Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allow local users to cause a denial of service (device reload) via crafted co (no CVSS)
- [CVE-2015-0603](https://cve.now/CVE-2015-0603.md): Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier use weak permissions for unspecified files, which allows local users to cause (no CVSS)
- [CVE-2015-0604](https://cve.now/CVE-2015-0604.md): The web framework on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to upload files to arbitrary loc (no CVSS)
- [CVE-2015-0605](https://cve.now/CVE-2015-0605.md): The uuencode inspection engine in Cisco AsyncOS on Cisco Email Security Appliance (ESA) devices 8.5 and earlier allows remote attackers to b (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-02-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.