# CVEs published 2015-03-20

8 CVEs were published on March 20, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-1802](https://cve.now/CVE-2015-1802.md): The bdfReadProperties function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 allows remote authenticated users t (no CVSS)
- [CVE-2015-1803](https://cve.now/CVE-2015-1803.md): The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly handle character (no CVSS)
- [CVE-2015-1804](https://cve.now/CVE-2015-1804.md): The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly perform type conv (no CVSS)
- [CVE-2015-2562](https://cve.now/CVE-2015-2562.md): Multiple SQL injection vulnerabilities in the Web-Dorado ECommerce WD (com\_ecommercewd) component 1.2.5 for Joomla! allow remote attackers t (no CVSS)
- [CVE-2015-2563](https://cve.now/CVE-2015-2563.md): SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 0.9.9 and 1.2.3 allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2015-2564](https://cve.now/CVE-2015-2564.md): SQL injection vulnerability in client-edit.php in ProjectSend (formerly cFTP) r561 allows remote authenticated users to execute arbitrary SQ (no CVSS)
- [CVE-2015-0668](https://cve.now/CVE-2015-0668.md): Cross-site scripting (XSS) vulnerability in the administration portal in Cisco WebEx Meetings Server 2.5 and 2.5.99.2 allows remote attacker (no CVSS)
- [CVE-2015-0671](https://cve.now/CVE-2015-0671.md): The DNS implementation in Cisco Videoscape Distribution Suite for Internet Streaming (VDS-IS) 3.2(1) allows remote attackers to cause a deni (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-03-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.