# CVEs published 2016-04-06

22 CVEs were published on April 6, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2015-6312](https://cve.now/CVE-2015-6312.md): Cisco TelePresence Server 3.1 on 7010, Mobility Services Engine (MSE) 8710, Multiparty Media 310 and 320, and Virtual Machine (VM) devices a (no CVSS)
- [CVE-2015-6313](https://cve.now/CVE-2015-6313.md): Cisco TelePresence Server 4.1(2.29) through 4.2(4.17) on 7010; Mobility Services Engine (MSE) 8710; Multiparty Media 310, 320, and 820; and (no CVSS)
- [CVE-2015-7921](https://cve.now/CVE-2015-7921.md): The FTP server in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05. (no CVSS)
- [CVE-2016-0871](https://cve.now/CVE-2016-0871.md): Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to read the configuration file, and consequently discover credentia (no CVSS)
- [CVE-2016-1169](https://cve.now/CVE-2016-1169.md): Cross-site scripting (XSS) vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2016-1170](https://cve.now/CVE-2016-1170.md): Cross-site request forgery (CSRF) vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to hijack the authe (no CVSS)
- [CVE-2016-1171](https://cve.now/CVE-2016-1171.md): Cross-site scripting (XSS) vulnerability in the Recruit plugin before 0.9.3 for baserCMS allows remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2016-1172](https://cve.now/CVE-2016-1172.md): Cross-site request forgery (CSRF) vulnerability in the Recruit plugin before 0.9.3 for baserCMS allows remote attackers to hijack the authen (no CVSS)
- [CVE-2016-1173](https://cve.now/CVE-2016-1173.md): Cross-site scripting (XSS) vulnerability in the Menubook plugin before 0.9.3 for baserCMS allows remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2016-1174](https://cve.now/CVE-2016-1174.md): Cross-site request forgery (CSRF) vulnerability in the Menubook plugin before 0.9.3 for baserCMS allows remote attackers to hijack the authe (no CVSS)
- [CVE-2016-1290](https://cve.now/CVE-2016-1290.md): The web API in Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allows remote authe (no CVSS)
- [CVE-2016-1291](https://cve.now/CVE-2016-1291.md): Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allow remote attackers to execute (no CVSS)
- [CVE-2016-1313](https://cve.now/CVE-2016-1313.md): Cisco UCS Invicta C3124SA Appliance 4.3.1 through 5.0.1, UCS Invicta Scaling System and Appliance, and Whiptail Racerunner improperly store (no CVSS)
- [CVE-2016-1346](https://cve.now/CVE-2016-1346.md): The kernel in Cisco TelePresence Server 3.0 through 4.2(4.18) on Mobility Services Engine (MSE) 8710 devices allows remote attackers to caus (no CVSS)
- [CVE-2016-2272](https://cve.now/CVE-2016-2272.md): Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to have an unspecified impact via a modified cookie. (no CVSS)
- [CVE-2016-2277](https://cve.now/CVE-2016-2277.md): IAB.exe in Rockwell Automation Integrated Architecture Builder (IAB) before 9.6.0.8 and 9.7.x before 9.7.0.2 allows remote attackers to exec (no CVSS)
- [CVE-2016-2290](https://cve.now/CVE-2016-2290.md): Heap-based buffer overflow in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS (no CVSS)
- [CVE-2016-2291](https://cve.now/CVE-2016-2291.md): Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 allow remote a (no CVSS)
- [CVE-2016-2292](https://cve.now/CVE-2016-2292.md): Stack-based buffer overflow in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS (no CVSS)
- [CVE-2016-3968](https://cve.now/CVE-2016-3968.md): Multiple cross-site scripting (XSS) vulnerabilities in Sophos Cyberoam CR100iNG UTM appliance with firmware 10.6.3 MR-1 build 503, CR35iNG U (no CVSS)
- [CVE-2016-3969](https://cve.now/CVE-2016-3969.md): Cross-site scripting (XSS) vulnerability in McAfee Email Gateway (MEG) 7.6.x before 7.6.404, when File Filtering is enabled with the action (no CVSS)
- [CVE-2016-3118](https://cve.now/CVE-2016-3118.md): CRLF injection vulnerability in CA API Gateway (formerly Layer7 API Gateway) 7.1 before 7.1.04, 8.0 through 8.3 before 8.3.01, and 8.4 befor (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-04-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.