# CVEs published 2015-03-25

12 CVEs were published on March 25, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2014-9711](https://cve.now/CVE-2014-9711.md): Multiple cross-site scripting (XSS) vulnerabilities in the Investigative Reports in Websense TRITON AP-WEB before 8.0.0 and Web Security and (no CVSS)
- [CVE-2015-0295](https://cve.now/CVE-2015-0295.md): The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote at (no CVSS)
- [CVE-2015-2316](https://cve.now/CVE-2015-2316.md): The utils.html.strip\_tags function in Django 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1, when using certain versions of (no CVSS, django)
- [CVE-2015-2317](https://cve.now/CVE-2015-2317.md): The utils.http.is\_safe\_url function in Django before 1.4.20, 1.5.x, 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1 does not (no CVSS, django)
- [CVE-2015-2559](https://cve.now/CVE-2015-2559.md): Drupal 6.x before 6.35 and 7.x before 7.35 allows remote authenticated users to reset the password of other accounts by leveraging an accoun (no CVSS)
- [CVE-2015-2701](https://cve.now/CVE-2015-2701.md): Cross-site request forgery (CSRF) vulnerability in CS-Cart 4.2.4 allows remote attackers to hijack the authentication of users for requests (no CVSS)
- [CVE-2015-2702](https://cve.now/CVE-2015-2702.md): Cross-site scripting (XSS) vulnerability in the Message Log in the Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 and V-Ser (no CVSS)
- [CVE-2015-2703](https://cve.now/CVE-2015-2703.md): Multiple cross-site scripting (XSS) vulnerabilities in Websense TRITON AP-WEB before 8.0.0 and V-Series 7.7 appliances allow remote attacker (no CVSS)
- [CVE-2014-6134](https://cve.now/CVE-2014-6134.md): IBM Rational ClearCase 8.0.0 before 8.0.0.14 and 8.0.1 before 8.0.1.7, when Installation Manager before 1.8.2 is used, retains cleartext ser (no CVSS)
- [CVE-2014-8923](https://cve.now/CVE-2014-8923.md): The (1) IBM Tivoli Identity Manager Active Directory adapter before 5.1.24 and (2) IBM Security Identity Manager Active Directory adapter be (no CVSS)
- [CVE-2014-8925](https://cve.now/CVE-2014-8925.md): Cross-site request forgery (CSRF) vulnerability in ClearQuest Web in IBM Rational ClearQuest 7.1.x before 7.1.2.17, 8.0.0.x before 8.0.0.14, (no CVSS)
- [CVE-2015-0138](https://cve.now/CVE-2015-0138.md): GSKit in IBM Tivoli Directory Server (ITDS) 6.0 before 6.0.0.73-ISS-ITDS-IF0073, 6.1 before 6.1.0.66-ISS-ITDS-IF0066, 6.2 before 6.2.0.42-IS (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-03-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.