# CVEs published 2015-03-05 9 CVEs were published on March 5, 2015: 0 critical, 0 high. Days are UTC. - [CVE-2014-9688](https://cve.now/CVE-2014-9688.md): Unspecified vulnerability in the Ninja Forms plugin before 2.8.10 for WordPress has unknown impact and remote attack vectors related to admi (no CVSS) - [CVE-2015-2218](https://cve.now/CVE-2015-2218.md): Multiple cross-site scripting (XSS) vulnerabilities in the wp\_ajax\_save\_item function in wonderpluginaudio.php in the WonderPlugin Audio Pla (no CVSS) - [CVE-2015-2220](https://cve.now/CVE-2015-2220.md): Multiple cross-site scripting (XSS) vulnerabilities in the Ninja Forms plugin before 2.8.9 for WordPress allow (1) remote attackers to injec (no CVSS) - [CVE-2015-2214](https://cve.now/CVE-2015-2214.md): NetCat 5.01 and earlier allows remote attackers to obtain the installation path via the redirect\_url parameter to netshop/post.php. (no CVSS) - [CVE-2015-2215](https://cve.now/CVE-2015-2215.md): Open redirect vulnerability in the Services single sign-on server helper (services\_sso\_server\_helper) module for Drupal allows remote attack (no CVSS) - [CVE-2015-2216](https://cve.now/CVE-2015-2216.md): SQL injection vulnerability in ecomm-sizes.php in the Photocrati theme 4.x for WordPress allows remote attackers to execute arbitrary SQL co (no CVSS) - [CVE-2015-0891](https://cve.now/CVE-2015-0891.md): Cross-site scripting (XSS) vulnerability in Maroyaka CGI Maroyaka Simple Board allows remote attackers to inject arbitrary web script or HTM (no CVSS) - [CVE-2015-0892](https://cve.now/CVE-2015-0892.md): Cross-site scripting (XSS) vulnerability in Maroyaka CGI Maroyaka Image Album allows remote attackers to inject arbitrary web script or HTML (no CVSS) - [CVE-2015-0893](https://cve.now/CVE-2015-0893.md): Cross-site scripting (XSS) vulnerability in Maroyaka CGI Maroyaka Relay Novel allows remote attackers to inject arbitrary web script or HTML (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-03-05 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.