# CVEs published 2016-03-01

6 CVEs were published on March 1, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-2559](https://cve.now/CVE-2016-2559.md): Cross-site scripting (XSS) vulnerability in the format function in libraries/sql-parser/src/Utils/Error.php in the SQL parser in phpMyAdmin (no CVSS, phpmyadmin/phpmyadmin)
- [CVE-2016-2560](https://cve.now/CVE-2016-2560.md): Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.15, 4.4.x before 4.4.15.5, and 4.5.x before 4.5.5.1 al (no CVSS)
- [CVE-2016-2561](https://cve.now/CVE-2016-2561.md): Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.4.x before 4.4.15.5 and 4.5.x before 4.5.5.1 allow remote authenticated (no CVSS)
- [CVE-2016-2562](https://cve.now/CVE-2016-2562.md): The checkHTTP function in libraries/Config.class.php in phpMyAdmin 4.5.x before 4.5.5.1 does not verify X.509 certificates from api.github.c (no CVSS, phpmyadmin/phpmyadmin)
- [CVE-2016-1353](https://cve.now/CVE-2016-1353.md): The TCP implementation in Cisco Videoscape Distribution Suite for Internet Streaming (VDS-IS) 3.3(0), 3.3(1), 4.0(0), and 4.1(0) does not pr (no CVSS)
- [CVE-2016-0800](https://cve.now/CVE-2016-0800.md): The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify me (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-03-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.