# Vulnerabilities published in 2015


- [CVE-2015-1631](https://insights.sbomify.com/CVE-2015-1631/): Auth bypass in microsoft:exchange server (medium 5.0)
- [CVE-2015-1630](https://insights.sbomify.com/CVE-2015-1630/): Cross-site scripting in microsoft:exchange server (medium 4.3)
- [CVE-2015-1629](https://insights.sbomify.com/CVE-2015-1629/): Cross-site scripting in microsoft:exchange server (medium 4.3)
- [CVE-2015-1628](https://insights.sbomify.com/CVE-2015-1628/): Cross-site scripting in microsoft:exchange server (medium 4.3)
- [CVE-2015-1627](https://insights.sbomify.com/CVE-2015-1627/): Privilege escalation in microsoft:internet explorer (medium 4.3)
- [CVE-2015-1626](https://insights.sbomify.com/CVE-2015-1626/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2015-1625](https://insights.sbomify.com/CVE-2015-1625/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2015-1624](https://insights.sbomify.com/CVE-2015-1624/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2015-1623](https://insights.sbomify.com/CVE-2015-1623/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2015-1622](https://insights.sbomify.com/CVE-2015-1622/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2015-1621](https://insights.sbomify.com/CVE-2015-1621/): Cross-site scripting in webform prepopulate block project:webform prepopulate block (low 3.5)
- [CVE-2015-1619](https://insights.sbomify.com/CVE-2015-1619/): Cross-site scripting in mcafee:email gateway (low 3.5)
- [CVE-2015-1618](https://insights.sbomify.com/CVE-2015-1618/): Information disclosure in mcafee:data loss prevention endpoint (medium 4.0)
- [CVE-2015-1617](https://insights.sbomify.com/CVE-2015-1617/): Cross-site scripting in mcafee:data loss prevention endpoint (low 3.5)
- [CVE-2015-1616](https://insights.sbomify.com/CVE-2015-1616/): SQL injection in mcafee:data loss prevention endpoint (medium 6.5)
- [CVE-2015-1614](https://insights.sbomify.com/CVE-2015-1614/): Cross-site request forgery in image metadata cruncher project:image metadata cruncher (medium 6.8)
- [CVE-2015-1613](https://insights.sbomify.com/CVE-2015-1613/): Information disclosure in rhodecode:rhodecode enterprise (medium 4.0)
- [CVE-2015-1612](https://insights.sbomify.com/CVE-2015-1612/): OpenFlow plugin for OpenDaylight LLDP Relay (high 7.5)
- [CVE-2015-1611](https://insights.sbomify.com/CVE-2015-1611/): OpenFlow plugin for OpenDaylight allows spoofing the SDN topology (high 7.5)
- [CVE-2015-1610](https://insights.sbomify.com/CVE-2015-1610/): Security feature bypass in opendaylight:l2switch (medium 5.3)
- [CVE-2015-1609](https://insights.sbomify.com/CVE-2015-1609/): Denial of service in fedoraproject:fedora (medium 5.0)
- [CVE-2015-1608](https://insights.sbomify.com/CVE-2015-1608/): Information disclosure in topline systems:opportunity form (medium 4.0)
- [CVE-2015-1607](https://insights.sbomify.com/CVE-2015-1607/): Memory corruption in canonical:ubuntu linux (medium 5.5)
- [CVE-2015-1606](https://insights.sbomify.com/CVE-2015-1606/): Use after free in debian:debian linux (medium 5.5)
- [CVE-2015-1605](https://insights.sbomify.com/CVE-2015-1605/): SQL injection in dell:asset manager (high 7.5)
- [CVE-2015-1604](https://insights.sbomify.com/CVE-2015-1604/): File upload in adminsystems cms project:adminsystems cms (medium 6.5)
- [CVE-2015-1603](https://insights.sbomify.com/CVE-2015-1603/): Cross-site scripting in adminsystems cms project:adminsystems cms (medium 4.3)
- [CVE-2015-1602](https://insights.sbomify.com/CVE-2015-1602/): Information disclosure in siemens:simatic step 7 (low 2.1)
- [CVE-2015-1601](https://insights.sbomify.com/CVE-2015-1601/): Other in siemens:simatic step 7 (medium 6.8)
- [CVE-2015-1600](https://insights.sbomify.com/CVE-2015-1600/): Information disclosure in netatmo:indoor module firmware (high 7.5)
- [CVE-2015-1599](https://insights.sbomify.com/CVE-2015-1599/): Security feature bypass in siemens:spcanywhere (low 2.1)
- [CVE-2015-1598](https://insights.sbomify.com/CVE-2015-1598/): Information disclosure in siemens:spcanywhere (low 2.1)
- [CVE-2015-1597](https://insights.sbomify.com/CVE-2015-1597/): Weak cryptography in siemens:spcanywhere (medium 6.8)
- [CVE-2015-1596](https://insights.sbomify.com/CVE-2015-1596/): Weak cryptography in siemens:spcanywhere (medium 5.8)
- [CVE-2015-1595](https://insights.sbomify.com/CVE-2015-1595/): Weak cryptography in siemens:spcanywhere (medium 4.3)
- [CVE-2015-1594](https://insights.sbomify.com/CVE-2015-1594/): Privilege escalation in siemens:simatic cfc (medium 6.9)
- [CVE-2015-1593](https://insights.sbomify.com/CVE-2015-1593/): Security feature bypass in linux:linux kernel (medium 5.0)
- [CVE-2015-1592](https://insights.sbomify.com/CVE-2015-1592/): Deserialization in debian:debian linux (high 7.5)
- [CVE-2015-1591](https://insights.sbomify.com/CVE-2015-1591/): Privilege escalation in kamailio:kamailio (high 7.8)
- [CVE-2015-1590](https://insights.sbomify.com/CVE-2015-1590/): Misconfiguration in kamailio:kamailio (high 7.8)
- [CVE-2015-1589](https://insights.sbomify.com/CVE-2015-1589/): Path traversal in archmage project:archmage (medium 5.0)
- [CVE-2015-1588](https://insights.sbomify.com/CVE-2015-1588/): Cross-site scripting in open-xchange:open-xchange appsuite (medium 6.1)
- [CVE-2015-1587](https://insights.sbomify.com/CVE-2015-1587/): File upload in maarch:gec\/ged (high 7.5)
- [CVE-2015-1585](https://insights.sbomify.com/CVE-2015-1585/): Fat Free CRM Cross-Site Request Forgery vulnerability (medium 6.8)
- [CVE-2015-1583](https://insights.sbomify.com/CVE-2015-1583/): Cross-site request forgery in atutor:atutor (high 8.8)
- [CVE-2015-1582](https://insights.sbomify.com/CVE-2015-1582/): Cross-site scripting in web-dorado:spider facebook (medium 4.3)
- [CVE-2015-1581](https://insights.sbomify.com/CVE-2015-1581/): Cross-site request forgery in mobile domain project:mobile domain (medium 6.8)
- [CVE-2015-1580](https://insights.sbomify.com/CVE-2015-1580/): Cross-site request forgery in redirection project:redirection (medium 6.8)
- [CVE-2015-1579](https://insights.sbomify.com/CVE-2015-1579/): Path traversal in elegantthemes:divi (medium 5.0)
- [CVE-2015-1578](https://insights.sbomify.com/CVE-2015-1578/): Open redirect in yuba:u5cms (medium 5.8)
- [CVE-2015-1577](https://insights.sbomify.com/CVE-2015-1577/): Path traversal in yuba:u5cms (medium 6.4)
- [CVE-2015-1576](https://insights.sbomify.com/CVE-2015-1576/): SQL injection in yuba:u5cms (high 7.5)
- [CVE-2015-1575](https://insights.sbomify.com/CVE-2015-1575/): Cross-site scripting in yuba:u5cms (medium 4.3)
- [CVE-2015-1574](https://insights.sbomify.com/CVE-2015-1574/): Denial of service in google:email (medium 5.0)
- [CVE-2015-1573](https://insights.sbomify.com/CVE-2015-1573/): Denial of service in linux:linux kernel (medium 5.5)
- [CVE-2015-1572](https://insights.sbomify.com/CVE-2015-1572/): Memory corruption in canonical:ubuntu linux (medium 4.6)
- [CVE-2015-1571](https://insights.sbomify.com/CVE-2015-1571/): Hardcoded credentials in fortinet:fortios (medium 4.3)
- [CVE-2015-1570](https://insights.sbomify.com/CVE-2015-1570/): Weak cryptography in fortinet:forticlient (medium 4.3)
- [CVE-2015-1569](https://insights.sbomify.com/CVE-2015-1569/): Weak cryptography in fortinet:forticlient (medium 4.3)
- [CVE-2015-1568](https://insights.sbomify.com/CVE-2015-1568/): Cross-site request forgery in studio.gd:gd infinite scroll (medium 6.8)
- [CVE-2015-1567](https://insights.sbomify.com/CVE-2015-1567/): Cross-site scripting in studio.gd:gd infinite scroll (medium 4.3)
- [CVE-2015-1566](https://insights.sbomify.com/CVE-2015-1566/): Moderate severity vulnerability that affects DotNetNuke.Core (medium 4.3)
- [CVE-2015-1565](https://insights.sbomify.com/CVE-2015-1565/): Cross-site scripting in hitachi:compute systems manager (medium 4.3)
- [CVE-2015-1564](https://insights.sbomify.com/CVE-2015-1564/): Cross-site scripting in plainblack:webgui (medium 4.3)
- [CVE-2015-1563](https://insights.sbomify.com/CVE-2015-1563/): Denial of service in fedoraproject:fedora (low 2.1)
- [CVE-2015-1562](https://insights.sbomify.com/CVE-2015-1562/): Cross-site scripting in saurus:saurus cms (medium 4.3)
- [CVE-2015-1561](https://insights.sbomify.com/CVE-2015-1561/): Centreon Command Injection (medium 6.5)
- [CVE-2015-1560](https://insights.sbomify.com/CVE-2015-1560/): SQL injection in centreon:centreon (high 7.5)
- [CVE-2015-1559](https://insights.sbomify.com/CVE-2015-1559/): Cross-site request forgery in epignosis:efront (medium 6.8)
- [CVE-2015-1558](https://insights.sbomify.com/CVE-2015-1558/): Denial of service in digium:asterisk (low 3.5)
- [CVE-2015-1555](https://insights.sbomify.com/CVE-2015-1555/): Auth bypass in zend:zend framework (critical 9.1)
- [CVE-2015-1554](https://insights.sbomify.com/CVE-2015-1554/): Denial of service in kgb-bot project:kgb-bot (high 7.5)
- [CVE-2015-1551](https://insights.sbomify.com/CVE-2015-1551/): Path traversal in arubanetworks:clearpass policy manager (medium 4.0)
- [CVE-2015-1550](https://insights.sbomify.com/CVE-2015-1550/): Path traversal in arubanetworks:clearpass policy manager (critical 9.0)
- [CVE-2015-1548](https://insights.sbomify.com/CVE-2015-1548/): Memory corruption in acme:mini httpd (medium 5.0)
- [CVE-2015-1547](https://insights.sbomify.com/CVE-2015-1547/): Memory corruption in debian:debian linux (medium 6.5)
- [CVE-2015-1546](https://insights.sbomify.com/CVE-2015-1546/): Memory corruption in apple:mac os x (medium 5.0)
- [CVE-2015-1545](https://insights.sbomify.com/CVE-2015-1545/): Null dereference in openldap:openldap (medium 5.0)
- [CVE-2015-1541](https://insights.sbomify.com/CVE-2015-1541/): Security feature bypass in google:android (medium 4.3)
- [CVE-2015-1539](https://insights.sbomify.com/CVE-2015-1539/): Integer overflow in google:android (critical 10.0)
- [CVE-2015-1538](https://insights.sbomify.com/CVE-2015-1538/): Integer overflow in google:android (critical 10.0)
- [CVE-2015-1537](https://insights.sbomify.com/CVE-2015-1537/): Integer overflow in google:android (high 7.8)
- [CVE-2015-1536](https://insights.sbomify.com/CVE-2015-1536/): Integer overflow in google:android (high 8.5)
- [CVE-2015-1530](https://insights.sbomify.com/CVE-2015-1530/): Integer overflow in google:android (high 7.8)
- [CVE-2015-1529](https://insights.sbomify.com/CVE-2015-1529/): Integer overflow in google:android (high 7.5)
- [CVE-2015-1528](https://insights.sbomify.com/CVE-2015-1528/): Integer overflow in google:android (critical 9.3)
- [CVE-2015-1527](https://insights.sbomify.com/CVE-2015-1527/): Integer overflow in google:android (high 7.8)
- [CVE-2015-1526](https://insights.sbomify.com/CVE-2015-1526/): Integer overflow in google:android (medium 5.5)
- [CVE-2015-1525](https://insights.sbomify.com/CVE-2015-1525/): Null dereference in google:android (medium 5.5)
- [CVE-2015-1522](https://insights.sbomify.com/CVE-2015-1522/): Memory corruption in bro:bro (high 7.5)
- [CVE-2015-1521](https://insights.sbomify.com/CVE-2015-1521/): Memory corruption in bro:bro (high 7.5)
- [CVE-2015-1518](https://insights.sbomify.com/CVE-2015-1518/): SQL injection in redaxscript:redaxscript (high 7.5)
- [CVE-2015-1517](https://insights.sbomify.com/CVE-2015-1517/): SQL injection in piwigo:piwigo (medium 6.0)
- [CVE-2015-1516](https://insights.sbomify.com/CVE-2015-1516/): Cross-site scripting in polycom:realpresence cloudaxis suite (low 3.5)
- [CVE-2015-1515](https://insights.sbomify.com/CVE-2015-1515/): Memory corruption in softsphere:defensewall personal firewall (high 7.2)
- [CVE-2015-1514](https://insights.sbomify.com/CVE-2015-1514/): SQL injection in fancyfon:famoc (high 7.5)
- [CVE-2015-1513](https://insights.sbomify.com/CVE-2015-1513/): SQL injection in siphon:siphone enterprise pbx (high 7.5)
- [CVE-2015-1512](https://insights.sbomify.com/CVE-2015-1512/): Cross-site scripting in fancyfon:famoc (medium 4.3)
- [CVE-2015-1503](https://insights.sbomify.com/CVE-2015-1503/): Path traversal in icewarp:mail server (high 7.5)
- [CVE-2015-1501](https://insights.sbomify.com/CVE-2015-1501/): Code injection in solarwinds:server and application monitor (medium 6.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2015/page/66/