# CVEs published 2015-05-21 9 CVEs were published on May 21, 2015: 0 critical, 0 high. Days are UTC. - [CVE-2012-1978](https://cve.now/CVE-2012-1978.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Simple PHP Agenda 2.2.8 and earlier allow remote attackers to hijack the authe (no CVSS) - [CVE-2015-3647](https://cve.now/CVE-2015-3647.md): Multiple cross-site scripting (XSS) vulnerabilities in wppa-ajax-front.php in the WP Photo Album Plus (aka WPPA) plugin before 6.1.3 for Wor (no CVSS) - [CVE-2015-4018](https://cve.now/CVE-2015-4018.md): SQL injection vulnerability in feedwordpresssyndicationpage.class.php in the FeedWordPress plugin before 2015.0514 for WordPress allows remo (no CVSS) - [CVE-2015-3911](https://cve.now/CVE-2015-3911.md): Huawei E587 Mobile WiFi with firmware before 11.203.30.00.00 allows remote attackers to bypass authentication, change configurations, send m (no CVSS) - [CVE-2015-3912](https://cve.now/CVE-2015-3912.md): Huawei E355s Mobile WiFi with firmware before 22.158.45.02.625 and WEBUI before 13.100.04.01.625 allows remote attackers to obtain sensitive (no CVSS) - [CVE-2015-0741](https://cve.now/CVE-2015-0741.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco Prime Central for Hosted Collaboration Solution (PC4HCS) 10.6(1) and ear (no CVSS) - [CVE-2015-0742](https://cve.now/CVE-2015-0742.md): The Protocol Independent Multicast (PIM) application in Cisco Adaptive Security Appliance (ASA) Software 9.2(0.0), 9.2(0.104), 9.2(3.1), 9.2 (no CVSS) - [CVE-2015-3036](https://cve.now/CVE-2015-3036.md): Stack-based buffer overflow in the run\_init\_sbus function in the KCodes NetUSB module for the Linux kernel, as used in certain NETGEAR produ (no CVSS) - [CVE-2015-4000](https://cve.now/CVE-2015-4000.md): The TLS protocol 1.2 and earlier, when a DHE\_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE\_E (CVSS 3.7) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-05-21 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.