# CVEs published 2015-04-15 10 CVEs were published on April 15, 2015: 0 critical, 0 high. Days are UTC. - [CVE-2015-0345](https://cve.now/CVE-2015-0345.md): Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 16 and 11 before Update 5 allows remote attackers to inject ar (no CVSS) - [CVE-2015-0693](https://cve.now/CVE-2015-0693.md): Cisco Web Security Appliance (WSA) devices with software 8.5.0-ise-147 do not properly restrict use of the pickle Python module during certa (no CVSS) - [CVE-2015-0696](https://cve.now/CVE-2015-0696.md): Cross-site scripting (XSS) vulnerability in the login page in Cisco TC Software before 7.1.0 on Cisco TelePresence Collaboration Desk and Ro (no CVSS) - [CVE-2015-0697](https://cve.now/CVE-2015-0697.md): Open redirect vulnerability in the login page in Cisco TC Software before 6.3-26 and 7.x before 7.3.0 on Cisco TelePresence Collaboration De (no CVSS) - [CVE-2015-0698](https://cve.now/CVE-2015-0698.md): Multiple cross-site scripting (XSS) vulnerabilities in filter search forms in admin web pages on Cisco Web Security Appliance (WSA) devices (no CVSS) - [CVE-2015-0699](https://cve.now/CVE-2015-0699.md): SQL injection vulnerability in the Interactive Voice Response (IVR) component in Cisco Unified Communications Manager (UCM) 10.5(1.98991.13) (no CVSS) - [CVE-2015-0906](https://cve.now/CVE-2015-0906.md): Directory traversal vulnerability in Lhaplus before 1.70 allows remote attackers to write to arbitrary files via a crafted archive. (no CVSS) - [CVE-2015-0907](https://cve.now/CVE-2015-0907.md): Buffer overflow in Lhaplus before 1.70 allows remote attackers to execute arbitrary code via a crafted archive. (no CVSS) - [CVE-2015-1897](https://cve.now/CVE-2015-1897.md): Stack-based buffer overflow in the FastBackMount process in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.11.1 allows local users to ga (no CVSS) - [CVE-2015-1898](https://cve.now/CVE-2015-1898.md): Stack-based buffer overflow in the FastBackMount process in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.11.1 allows local users to ga (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-04-15 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.