# CVEs published 2015-06-17

19 CVEs were published on June 17, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2012-6692](https://cve.now/CVE-2012-6692.md): Cross-site scripting (XSS) vulnerability in js/wp-seo-metabox.js in the WordPress SEO by Yoast plugin before 2.2 for WordPress allows remote (no CVSS)
- [CVE-2015-2665](https://cve.now/CVE-2015-2665.md): Cross-site scripting (XSS) vulnerability in Cacti before 0.8.8d allows remote attackers to inject arbitrary web script or HTML via unspecifi (no CVSS)
- [CVE-2015-2803](https://cve.now/CVE-2015-2803.md): SQL injection vulnerability in mod1/index.php in the Akronymmanager (sb\_akronymmanager) extension before 7.0.0 for TYPO3 allows remote authe (no CVSS)
- [CVE-2015-3429](https://cve.now/CVE-2015-3429.md): Cross-site scripting (XSS) vulnerability in example.html in Genericons before 3.3.1, as used in WordPress before 4.2.2, allows remote attack (no CVSS)
- [CVE-2015-4336](https://cve.now/CVE-2015-4336.md): cloner.functions.php in the XCloner plugin 3.1.2 for WordPress allows remote authenticated users to execute arbitrary commands via a file co (no CVSS)
- [CVE-2015-4337](https://cve.now/CVE-2015-4337.md): Cross-site scripting (XSS) vulnerability in the XCloner plugin 3.1.2 for WordPress allows remote authenticated users to inject arbitrary web (no CVSS)
- [CVE-2015-4338](https://cve.now/CVE-2015-4338.md): Static code injection vulnerability in the XCloner plugin 3.1.2 for WordPress allows remote authenticated users to inject arbitrary PHP code (no CVSS)
- [CVE-2015-4342](https://cve.now/CVE-2015-4342.md): SQL injection vulnerability in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via unspecified vectors involvi (no CVSS)
- [CVE-2015-4414](https://cve.now/CVE-2015-4414.md): Directory traversal vulnerability in download\_audio.php in the SE HTML5 Album Audio Player (se-html5-album-audio-player) plugin 1.1.0 and ea (no CVSS)
- [CVE-2015-4454](https://cve.now/CVE-2015-4454.md): SQL injection vulnerability in the get\_hash\_graph\_template function in lib/functions.php in Cacti before 0.8.8d allows remote attackers to e (no CVSS)
- [CVE-2015-0546](https://cve.now/CVE-2015-0546.md): EMC Unified Infrastructure Manager/Provisioning (UIM/P) 4.1 allows remote attackers to bypass LDAP authentication by providing a valid accou (no CVSS)
- [CVE-2015-3316](https://cve.now/CVE-2015-3316.md): CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; (no CVSS)
- [CVE-2015-3317](https://cve.now/CVE-2015-3317.md): CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; (no CVSS)
- [CVE-2015-3318](https://cve.now/CVE-2015-3318.md): CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; (no CVSS)
- [CVE-2015-4183](https://cve.now/CVE-2015-4183.md): Cisco UCS Central Software 1.2(1a) allows local users to gain privileges for OS command execution via a crafted CLI parameter, aka Bug ID CS (no CVSS)
- [CVE-2015-4186](https://cve.now/CVE-2015-4186.md): The diagnostics subsystem in the administrative web interface on Cisco Virtualization Experience (aka VXC) Client 6215 devices with firmware (no CVSS)
- [CVE-2015-4188](https://cve.now/CVE-2015-4188.md): SQL injection vulnerability in the Manager interface in Cisco Prime Collaboration 10.5(1) allows remote attackers to execute arbitrary SQL c (no CVSS)
- [CVE-2015-4190](https://cve.now/CVE-2015-4190.md): Cisco Cloud Portal in Cisco Prime Service Catalog 9.4.1\_vortex on Cloud Portal appliances allows man-in-the-middle attackers to modify data (no CVSS)
- [CVE-2015-4550](https://cve.now/CVE-2015-4550.md): The Cavium cryptographic-module firmware on Cisco Adaptive Security Appliance (ASA) devices with software 9.3(3) and 9.4(1.1) does not verif (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-06-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.