# CVEs published 2015-07-24

4 CVEs were published on July 24, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-0681](https://cve.now/CVE-2015-0681.md): The TFTP server in Cisco IOS 12.2(44)SQ1, 12.2(33)XN1, 12.4(25e)JAM1, 12.4(25e)JAO5m, 12.4(23)JY, 15.0(2)ED1, 15.0(2)EY3, 15.1(3)SVF4a, and (no CVSS)
- [CVE-2015-2973](https://cve.now/CVE-2015-2973.md): Multiple cross-site scripting (XSS) vulnerabilities in the Welcart plugin before 1.4.18 for WordPress allow remote attackers to inject arbit (no CVSS)
- [CVE-2015-4235](https://cve.now/CVE-2015-4235.md): Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.0(3o) and 1.1 before 1.1(1j) and Nexus 9000 ACI dev (no CVSS)
- [CVE-2015-4262](https://cve.now/CVE-2015-4262.md): The password-change feature in Cisco Unified MeetingPlace Web Conferencing before 8.5(5) MR3 and 8.6 before 8.6(2) does not check the sessio (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-07-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.