# CVEs published 2016-03-26

7 CVEs were published on March 26, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-1160](https://cve.now/CVE-2016-1160.md): Cross-site scripting (XSS) vulnerability in the WP Favorite Posts plugin before 1.6.6 for WordPress allows remote attackers to inject arbitr (no CVSS)
- [CVE-2016-1344](https://cve.now/CVE-2016-1344.md): The IKEv2 implementation in Cisco IOS 15.0 through 15.6 and IOS XE 3.3 through 3.17 allows remote attackers to cause a denial of service (de (no CVSS)
- [CVE-2016-1348](https://cve.now/CVE-2016-1348.md): Cisco IOS 15.0 through 15.5 and IOS XE 3.3 through 3.16 allow remote attackers to cause a denial of service (device reload) via a crafted DH (no CVSS)
- [CVE-2016-1349](https://cve.now/CVE-2016-1349.md): The Smart Install client implementation in Cisco IOS 12.2, 15.0, and 15.2 and IOS XE 3.2 through 3.7 allows remote attackers to cause a deni (no CVSS)
- [CVE-2016-1350](https://cve.now/CVE-2016-1350.md): Cisco IOS 15.3 and 15.4, Cisco IOS XE 3.8 through 3.11, and Cisco Unified Communications Manager allow remote attackers to cause a denial of (no CVSS)
- [CVE-2016-1351](https://cve.now/CVE-2016-1351.md): The Locator/ID Separation Protocol (LISP) implementation in Cisco IOS 15.1 and 15.2 and NX-OS 4.1 through 6.2 allows remote attackers to cau (no CVSS)
- [CVE-2016-3119](https://cve.now/CVE-2016-3119.md): The process\_db\_args function in plugins/kdb/ldap/libkdb\_ldap/ldap\_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5 (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-03-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.