# CVEs published 2015-03-03 10 CVEs were published on March 3, 2015: 0 critical, 0 high. Days are UTC. - [CVE-2015-2194](https://cve.now/CVE-2015-2194.md): Unrestricted file upload vulnerability in the fusion\_options function in functions.php in the Fusion theme 3.1 for Wordpress allows remote a (no CVSS) - [CVE-2015-2195](https://cve.now/CVE-2015-2195.md): Multiple cross-site scripting (XSS) vulnerabilities in the WP Media Cleaner plugin 2.2.6 for WordPress allow remote attackers to inject arbi (no CVSS) - [CVE-2015-2196](https://cve.now/CVE-2015-2196.md): SQL injection vulnerability in Spider Event Calendar 1.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the c (no CVSS) - [CVE-2015-2197](https://cve.now/CVE-2015-2197.md): Cross-site scripting (XSS) vulnerability in the Entity API module before 7.x-1.6 for Drupal allows remote authenticated users to inject arbi (no CVSS) - [CVE-2015-2198](https://cve.now/CVE-2015-2198.md): Multiple cross-site scripting (XSS) vulnerabilities in edit\_prefs.php in Beehive Forum 1.4.4 allow remote attackers to inject arbitrary web (no CVSS) - [CVE-2015-2199](https://cve.now/CVE-2015-2199.md): Multiple SQL injection vulnerabilities in the WonderPlugin Audio Player plugin before 2.1 for WordPress allow (1) remote authenticated users (no CVSS) - [CVE-2014-7896](https://cve.now/CVE-2014-7896.md): Multiple cross-site scripting (XSS) vulnerabilities in HP XP P9000 Command View Advanced Edition Software Online Help, as used in HP Device (no CVSS) - [CVE-2014-9283](https://cve.now/CVE-2014-9283.md): The BestWebSoft Captcha plugin before 4.0.7 for WordPress allows remote attackers to bypass the CAPTCHA protection mechanism and obtain admi (no CVSS) - [CVE-2014-9683](https://cve.now/CVE-2014-9683.md): Off-by-one error in the ecryptfs\_decode\_from\_filename function in fs/ecryptfs/crypto.c in the eCryptfs subsystem in the Linux kernel before (no CVSS) - [CVE-2015-0890](https://cve.now/CVE-2015-0890.md): The BestWebSoft Google Captcha (aka reCAPTCHA) plugin before 1.13 for WordPress allows remote attackers to bypass the CAPTCHA protection mec (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-03-03 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.