# CVEs published 2015-06-13 22 CVEs were published on June 13, 2015: 0 critical, 0 high. Days are UTC. - [CVE-2012-4716](https://cve.now/CVE-2012-4716.md): N-Tron 702-W Industrial Wireless Access Point devices use the same (1) SSH and (2) HTTPS private keys across different customers' installati (no CVSS) - [CVE-2015-3949](https://cve.now/CVE-2015-3949.md): Sinapsi eSolar Light with firmware before 2.0.3970\_schsl\_2.2.85 allows attackers to discover cleartext passwords by reading the HTML source (no CVSS) - [CVE-2015-3951](https://cve.now/CVE-2015-3951.md): RLE Nova-Wind Turbine HMI devices store cleartext credentials, which allows remote attackers to obtain sensitive information via unspecified (no CVSS) - [CVE-2015-0343](https://cve.now/CVE-2015-0343.md): Cross-site scripting (XSS) vulnerability in admin/home/homepage/search in the web app in Adobe Connect before 9.4 allows remote attackers to (no CVSS) - [CVE-2015-0344](https://cve.now/CVE-2015-0344.md): Cross-site scripting (XSS) vulnerability in the web app in Adobe Connect before 9.4 allows remote attackers to inject arbitrary web script o (no CVSS) - [CVE-2015-2952](https://cve.now/CVE-2015-2952.md): The user-information management functionality in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote aut (no CVSS) - [CVE-2015-2953](https://cve.now/CVE-2015-2953.md): Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to bypass intended access restrictions and (no CVSS) - [CVE-2015-2958](https://cve.now/CVE-2015-2958.md): Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to bypass intended access restrictions and (no CVSS) - [CVE-2015-2336](https://cve.now/CVE-2015-2336.md): TPView.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware (no CVSS) - [CVE-2015-2337](https://cve.now/CVE-2015-2337.md): TPInt.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware H (no CVSS) - [CVE-2015-2338](https://cve.now/CVE-2015-2338.md): TPview.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware (no CVSS) - [CVE-2015-2339](https://cve.now/CVE-2015-2339.md): TPview.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware (no CVSS) - [CVE-2015-2340](https://cve.now/CVE-2015-2340.md): TPInt.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware H (no CVSS) - [CVE-2015-2341](https://cve.now/CVE-2015-2341.md): VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.6, and VMware Fusion 6.x before 6.0.6 and 7.x before 7.0.1 allow attacke (no CVSS) - [CVE-2015-2954](https://cve.now/CVE-2015-2954.md): Cross-site request forgery (CSRF) vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote a (no CVSS) - [CVE-2015-2955](https://cve.now/CVE-2015-2955.md): Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to execute arbitrary OS commands via unspe (no CVSS) - [CVE-2015-2956](https://cve.now/CVE-2015-2956.md): SQL injection vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to execute (no CVSS) - [CVE-2015-2957](https://cve.now/CVE-2015-2957.md): Cross-site scripting (XSS) vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attacker (no CVSS) - [CVE-2015-2962](https://cve.now/CVE-2015-2962.md): CGI RESCUE BloBee 1.20 and earlier allows remote attackers to write to arbitrary files, and consequently execute arbitrary code, via unspeci (no CVSS) - [CVE-2015-3993](https://cve.now/CVE-2015-3993.md): Actian Matrix 5.1.x through 5.1.2.4 and 5.2.x through 5.2.0.1 allows remote authenticated users to bypass intended write-access restrictions (no CVSS) - [CVE-2015-4184](https://cve.now/CVE-2015-4184.md): The anti-spam scanner on Cisco Email Security Appliance (ESA) devices 3.3.1-09, 7.5.1-gpl-022, and 8.5.6-074 allows remote attackers to bypa (no CVSS) - [CVE-2015-4185](https://cve.now/CVE-2015-4185.md): The TCL interpreter in Cisco IOS 15.2 does not properly maintain the vty state, which allows local users to gain privileges by starting a se (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-06-13 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.