# CVEs published 2015-04-05

6 CVEs were published on April 5, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-0777](https://cve.now/CVE-2015-0777.md): drivers/xen/usbback/usbback.c in linux-2.6.18-xen-3.4.0 (aka the Xen 3.4.x support patches for the Linux kernel 2.6.18), as used in the Linu (no CVSS)
- [CVE-2015-1465](https://cve.now/CVE-2015-1465.md): The IPv4 implementation in the Linux kernel before 3.18.8 does not properly consider the length of the Read-Copy Update (RCU) grace period f (no CVSS)
- [CVE-2015-0529](https://cve.now/CVE-2015-0529.md): EMC PowerPath Virtual Appliance (aka vApp) before 2.0 has default passwords for the (1) emcupdate and (2) svcuser accounts, which makes it e (no CVSS)
- [CVE-2015-0932](https://cve.now/CVE-2015-0932.md): The ANTlabs InnGate firmware on IG 3100, IG 3101, InnGate 3.00 E, InnGate 3.01 E, InnGate 3.02 E, InnGate 3.10 E, InnGate 3.01 G, and InnGat (no CVSS)
- [CVE-2015-0950](https://cve.now/CVE-2015-0950.md): Cross-site scripting (XSS) vulnerability in admin.php in X-Cart 5.1.6 through 5.1.10 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2015-0951](https://cve.now/CVE-2015-0951.md): X-Cart before 5.1.11 allows remote authenticated users to read or delete address data of arbitrary accounts via a modified (1) update or (2) (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-04-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.