# CVEs published 2015-05-30

15 CVEs were published on May 30, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-0121](https://cve.now/CVE-2015-0121.md): IBM Rational Requirements Composer 3.0 through 3.0.1.6 and 4.0 through 4.0.7 and Rational DOORS Next Generation (RDNG) 4.0 through 4.0.7 and (no CVSS)
- [CVE-2015-0193](https://cve.now/CVE-2015-0193.md): Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, and 8.5.x throu (no CVSS)
- [CVE-2015-1937](https://cve.now/CVE-2015-1937.md): IBM PowerVC 1.2.0.x through 1.2.0.4, 1.2.1.x through 1.2.1.2, and 1.2.2.x through 1.2.2.2 does not require authentication for the ceilometer (no CVSS)
- [CVE-2015-2851](https://cve.now/CVE-2015-2851.md): client\_chown in the sync client in Synology Cloud Station 1.1-2291 through 3.1-3320 on OS X allows local users to change the ownership of ar (no CVSS)
- [CVE-2015-2852](https://cve.now/CVE-2015-2852.md): Cross-site request forgery (CSRF) vulnerability in the WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV38 (no CVSS)
- [CVE-2015-2853](https://cve.now/CVE-2015-2853.md): Session fixation vulnerability in the WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through (no CVSS)
- [CVE-2015-2854](https://cve.now/CVE-2015-2854.md): The WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 does not send a (no CVSS)
- [CVE-2015-2855](https://cve.now/CVE-2015-2855.md): The WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 does not set th (no CVSS)
- [CVE-2015-4138](https://cve.now/CVE-2015-4138.md): The WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 does not includ (no CVSS)
- [CVE-2015-0733](https://cve.now/CVE-2015-0733.md): CRLF injection vulnerability in the HTTP Header Handler in Digital Broadband Delivery System in Cisco Headend System Release allows remote a (no CVSS)
- [CVE-2015-0743](https://cve.now/CVE-2015-0743.md): Cisco Headend System Release allows remote attackers to cause a denial of service (DHCP and TFTP outage) via a flood of crafted UDP traffic, (no CVSS)
- [CVE-2015-0744](https://cve.now/CVE-2015-0744.md): Cisco DTA Control System (DTACS) 4.0.0.9 and Cisco Headend System Release allow remote attackers to cause a denial of service (CPU and memor (no CVSS)
- [CVE-2015-0745](https://cve.now/CVE-2015-0745.md): Cisco Headend System Release allows remote attackers to read temporary script files or archive files, and consequently obtain sensitive info (no CVSS)
- [CVE-2015-0747](https://cve.now/CVE-2015-0747.md): Cisco Conductor for Videoscape 3.0 and Cisco Headend System Release allow remote attackers to inject arbitrary cookies via a crafted HTTP re (no CVSS)
- [CVE-2015-0758](https://cve.now/CVE-2015-0758.md): The web-based user interface in Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to read arbitrary files via an XML document cont (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-05-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.