# CVEs published 2015-02-26

6 CVEs were published on February 26, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-2086](https://cve.now/CVE-2015-2086.md): Cross-site scripting (XSS) vulnerability in the live preview in the Panopoly Magic module before 7.x-1.17 for Drupal allows remote authentic (no CVSS)
- [CVE-2015-2087](https://cve.now/CVE-2015-2087.md): Unrestricted file upload vulnerability in the Avatar Uploader module before 6.x-1.3 for Drupal allows remote authenticated users to execute (no CVSS)
- [CVE-2015-2088](https://cve.now/CVE-2015-2088.md): Cross-site scripting (XSS) vulnerability in unspecified administration pages in the Term Queue module before 6.x-1.1 for Drupal allows remot (no CVSS)
- [CVE-2015-2089](https://cve.now/CVE-2015-2089.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the CrossSlide jQuery (crossslide-jquery-plugin-for-wordpress) plugin 2.0.5 fo (no CVSS)
- [CVE-2015-2090](https://cve.now/CVE-2015-2090.md): SQL injection vulnerability in the ajax\_survey function in settings.php in the WordPress Survey and Poll plugin 1.1.7 for Wordpress allows r (no CVSS)
- [CVE-2015-0633](https://cve.now/CVE-2015-0633.md): The Integrated Management Controller (IMC) in Cisco Unified Computing System (UCS) 1.4(7h) and earlier on C-Series servers allows remote att (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-02-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.