# CVEs published 2016-01-11 10 CVEs were published on January 11, 2016: 0 critical, 0 high. Days are UTC. - [CVE-2015-6566](https://cve.now/CVE-2015-6566.md): zarafa-autorespond in Zarafa Collaboration Platform (ZCP) before 7.2.1 allows local users to gain privileges via a symlink attack on /tmp/za (no CVSS) - [CVE-2015-7706](https://cve.now/CVE-2015-7706.md): Multiple cross-site scripting (XSS) vulnerabilities in Secure Data Space SDS-API before 3.5.7 allow remote attackers to inject arbitrary web (no CVSS) - [CVE-2015-8230](https://cve.now/CVE-2015-8230.md): Memory leak in Huawei eSpace 8950 IP phones with software before V200R003C00SPC300 allows remote attackers to cause a denial of service (mem (no CVSS) - [CVE-2015-8231](https://cve.now/CVE-2015-8231.md): Huawei eSpace 7910 and 7950 IP phones with software before V200R002C00SPC800 allow remote attackers with established sessions to cause a den (no CVSS) - [CVE-2015-8331](https://cve.now/CVE-2015-8331.md): The Operation and Maintenance Unit (OMU) in Huawei VCN500 with software before V100R002C00SPC200 does not properly invalidate the session ID (no CVSS) - [CVE-2015-8333](https://cve.now/CVE-2015-8333.md): The Operation and Maintenance Unit (OMU) in Huawei VCN500 with software before V100R002C00SPC200 allows remote authenticated users to change (no CVSS) - [CVE-2015-8335](https://cve.now/CVE-2015-8335.md): Huawei VCN500 with software before V100R002C00SPC201 logs passwords in cleartext, which allows remote authenticated users to obtain sensitiv (no CVSS) - [CVE-2015-6980](https://cve.now/CVE-2015-6980.md): Directory Utility in Apple OS X before 10.11.1 mishandles authentication for new sessions, which allows local users to gain privileges via u (no CVSS) - [CVE-2015-7024](https://cve.now/CVE-2015-7024.md): Untrusted search path vulnerability in Apple OS X before 10.11.1 allows local users to bypass intended Gatekeeper restrictions and gain priv (no CVSS) - [CVE-2015-7399](https://cve.now/CVE-2015-7399.md): IBM WebSphere Message Broker 7 before 7.0.0.8 and 8 before 8.0.0.6 and IBM Integration Bus 9 before 9.0.0.3 and 10 before 10.0.0.0 allow rem (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2016-01-11 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.