# CVEs published 2015-07-04

7 CVEs were published on July 4, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-0551](https://cve.now/CVE-2015-0551.md): Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum WebTop 6.7SP1 before P31, 6.7SP2 before P23, and 6.8 before P01; Docum (no CVSS)
- [CVE-2015-1966](https://cve.now/CVE-2015-1966.md): Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before FP17, 6.2.1 before FP9, and (no CVSS)
- [CVE-2015-4524](https://cve.now/CVE-2015-4524.md): Unrestricted file upload vulnerability in EMC Documentum WebTop 6.7SP1 before P31, 6.7SP2 before P23, and 6.8 before P01; Documentum Adminis (no CVSS)
- [CVE-2015-0547](https://cve.now/CVE-2015-0547.md): The D2CenterstageService.getComments service method in EMC Documentum D2 4.1 and 4.2 before 4.2 P16 and 4.5 before P03 allows remote authent (no CVSS)
- [CVE-2015-0548](https://cve.now/CVE-2015-0548.md): The D2DownloadService.getDownloadUrls service method in EMC Documentum D2 4.1 and 4.2 before 4.2 P16 and 4.5 before P03 allows remote authen (no CVSS)
- [CVE-2015-4196](https://cve.now/CVE-2015-4196.md): Platform Software before 4.4.5 in Cisco Unified Communications Domain Manager (CDM) 8.x has a hardcoded password for a privileged account, w (no CVSS)
- [CVE-2015-4525](https://cve.now/CVE-2015-4525.md): The log-gather implementation in the web administration interface in EMC Isilon OneFS 6.5.x.x through 7.1.1.x before 7.1.1.5 and 7.2.0.x bef (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-07-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.