# CVEs published 2015-05-28

13 CVEs were published on May 28, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2014-6628](https://cve.now/CVE-2014-6628.md): Aruba Networks ClearPass Policy Manager (CPPM) before 6.5.0 allows remote administrators to execute arbitrary code via unspecified vectors. (no CVSS)
- [CVE-2015-1389](https://cve.now/CVE-2015-1389.md): Cross-site scripting (XSS) vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allows remote attackers to inject ar (no CVSS)
- [CVE-2015-1392](https://cve.now/CVE-2015-1392.md): Multiple SQL injection vulnerabilities in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allow remote administrators to execute (no CVSS)
- [CVE-2015-1550](https://cve.now/CVE-2015-1550.md): Directory traversal vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allows remote administrators to execute arb (no CVSS)
- [CVE-2015-1551](https://cve.now/CVE-2015-1551.md): Directory traversal vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.4 allows remote administrators to read arbitr (no CVSS)
- [CVE-2015-3165](https://cve.now/CVE-2015-3165.md): Double free vulnerability in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 (no CVSS)
- [CVE-2015-4084](https://cve.now/CVE-2015-4084.md): Cross-site scripting (XSS) vulnerability in the Free Counter plugin 1.1 for WordPress allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2015-4127](https://cve.now/CVE-2015-4127.md): Cross-site scripting (XSS) vulnerability in the church\_admin plugin before 0.810 for WordPress allows remote attackers to inject arbitrary w (no CVSS)
- [CVE-2015-4132](https://cve.now/CVE-2015-4132.md): Multiple cross-site scripting (XSS) vulnerabilities in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allow remote administrato (no CVSS)
- [CVE-2015-4133](https://cve.now/CVE-2015-4133.md): Unrestricted file upload vulnerability in admin/scripts/FileUploader/php.php in the ReFlex Gallery plugin before 3.1.4 for WordPress allows (no CVSS)
- [CVE-2015-4134](https://cve.now/CVE-2015-4134.md): Open redirect vulnerability in goto.php in phpwind 8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing (no CVSS)
- [CVE-2015-4135](https://cve.now/CVE-2015-4135.md): Cross-site scripting (XSS) vulnerability in goto.php in phpwind 8.7 allows remote attackers to inject arbitrary web script or HTML via the u (no CVSS)
- [CVE-2015-1157](https://cve.now/CVE-2015-1157.md): CoreText in Apple iOS 8.x through 8.3 allows remote attackers to cause a denial of service (reboot and messaging disruption) via crafted Uni (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-05-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.