# CVEs published 2015-05-07

6 CVEs were published on May 7, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-3610](https://cve.now/CVE-2015-3610.md): The Siemens HomeControl for Room Automation application before 2.0.1 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2015-0531](https://cve.now/CVE-2015-0531.md): EMC SourceOne Email Management before 7.2 does not have a lockout mechanism for invalid login attempts, which makes it easier for remote att (no CVSS)
- [CVE-2015-0538](https://cve.now/CVE-2015-0538.md): ftagent.exe in EMC AutoStart 5.4.x and 5.5.x before 5.5.0.508 HF4 allows remote attackers to execute arbitrary commands via crafted packets. (no CVSS)
- [CVE-2015-0701](https://cve.now/CVE-2015-0701.md): Cisco UCS Central Software before 1.3(1a) allows remote attackers to execute arbitrary commands via a crafted HTTP request, aka Bug ID CSCut (no CVSS)
- [CVE-2015-0715](https://cve.now/CVE-2015-0715.md): SQL injection vulnerability in the administrative web interface in Cisco Unified Communications Manager 11.0(0.98000.225) allows remote auth (no CVSS)
- [CVE-2015-0716](https://cve.now/CVE-2015-0716.md): Cross-site request forgery (CSRF) vulnerability in the CUCReports page in Cisco Unity Connection 11.0(0.98000.225) and 11.0(0.98000.332) all (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-05-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.