# Vulnerabilities published in 2015


- [CVE-2015-1000010](https://insights.sbomify.com/CVE-2015-1000010/): Missing authorization in simple-image-manipulator project:simple-image-manipulator (high 7.5)
- [CVE-2015-1000009](https://insights.sbomify.com/CVE-2015-1000009/): Misconfiguration in google-adsense-and-hotel-booking project:google-adsense-and-hotel-booking (critical 9.1)
- [CVE-2015-1000008](https://insights.sbomify.com/CVE-2015-1000008/): Information disclosure in mp3-jplayer project:mp3-jplayer (medium 5.3)
- [CVE-2015-1000007](https://insights.sbomify.com/CVE-2015-1000007/): Server-side request forgery in wptf-image-gallery project:wptf-image-gallery (high 7.5)
- [CVE-2015-1000006](https://insights.sbomify.com/CVE-2015-1000006/): Path traversal in recent-backups project:recent-backups (high 7.5)
- [CVE-2015-1000005](https://insights.sbomify.com/CVE-2015-1000005/): Path traversal in candidate-application-form project:candidate-application-form (high 7.5)
- [CVE-2015-1000004](https://insights.sbomify.com/CVE-2015-1000004/): Cross-site scripting in filedownload project:filedownload (medium 6.1)
- [CVE-2015-1000003](https://insights.sbomify.com/CVE-2015-1000003/): SQL injection in filedownload project:filedownload (critical 9.8)
- [CVE-2015-1000002](https://insights.sbomify.com/CVE-2015-1000002/): Other in filedownload project:filedownload (high 8.2)
- [CVE-2015-1000001](https://insights.sbomify.com/CVE-2015-1000001/): File upload in fast-image-adder project:fast-image-adder (critical 9.8)
- [CVE-2015-1000000](https://insights.sbomify.com/CVE-2015-1000000/): File upload in mailcwp project:mailcwp (critical 9.8)
- [CVE-2015-1000](https://insights.sbomify.com/CVE-2015-1000/): Memory corruption in moxa:softcms (medium 6.8)
- [CVE-2015-0999](https://insights.sbomify.com/CVE-2015-0999/): Information disclosure in aveva:aveva edge (low 2.1)
- [CVE-2015-0998](https://insights.sbomify.com/CVE-2015-0998/): Information disclosure in aveva:aveva edge (low 3.3)
- [CVE-2015-0997](https://insights.sbomify.com/CVE-2015-0997/): Information disclosure in aveva:aveva edge (medium 5.0)
- [CVE-2015-0996](https://insights.sbomify.com/CVE-2015-0996/): Hardcoded credentials in aveva:aveva edge (low 2.1)
- [CVE-2015-0995](https://insights.sbomify.com/CVE-2015-0995/): Weak cryptography in inductiveautomation:ignition (medium 5.0)
- [CVE-2015-0994](https://insights.sbomify.com/CVE-2015-0994/): Security feature bypass in inductiveautomation:ignition (medium 4.0)
- [CVE-2015-0993](https://insights.sbomify.com/CVE-2015-0993/): Auth bypass in inductiveautomation:ignition (medium 6.4)
- [CVE-2015-0992](https://insights.sbomify.com/CVE-2015-0992/): Information disclosure in inductiveautomation:ignition (low 2.1)
- [CVE-2015-0991](https://insights.sbomify.com/CVE-2015-0991/): Information disclosure in inductiveautomation:ignition (medium 5.0)
- [CVE-2015-0990](https://insights.sbomify.com/CVE-2015-0990/): Privilege escalation in ecava:integraxor (medium 4.4)
- [CVE-2015-0989](https://insights.sbomify.com/CVE-2015-0989/): Denial of service in icsgmbh:pactware (medium 4.3)
- [CVE-2015-0988](https://insights.sbomify.com/CVE-2015-0988/): Weak cryptography in omron:cx-programmer (low 2.1)
- [CVE-2015-0987](https://insights.sbomify.com/CVE-2015-0987/): Information disclosure in omron:cj2h plc (critical 10.0)
- [CVE-2015-0986](https://insights.sbomify.com/CVE-2015-0986/): Memory corruption in moxa:vport activex sdk plus (high 7.5)
- [CVE-2015-0985](https://insights.sbomify.com/CVE-2015-0985/): Cross-site request forgery in xzeres:442sr (medium 6.8)
- [CVE-2015-0984](https://insights.sbomify.com/CVE-2015-0984/): Path traversal in honeywell:excel web xl 1000c1000 600 i\/o (critical 10.0)
- [CVE-2015-0982](https://insights.sbomify.com/CVE-2015-0982/): Memory corruption in schneider-electric:pelco ds-nv (high 7.5)
- [CVE-2015-0981](https://insights.sbomify.com/CVE-2015-0981/): Auth bypass in scadaengine:bacnet opc server (high 7.5)
- [CVE-2015-0980](https://insights.sbomify.com/CVE-2015-0980/): Memory corruption in scadaengine:bacnet opc server (critical 9.0)
- [CVE-2015-0979](https://insights.sbomify.com/CVE-2015-0979/): Memory corruption in scadaengine:bacnet opc server (critical 9.0)
- [CVE-2015-0978](https://insights.sbomify.com/CVE-2015-0978/): Privilege escalation in elipse:e3 (medium 6.9)
- [CVE-2015-0977](https://insights.sbomify.com/CVE-2015-0977/): Command injection in network vision:intravue (critical 10.0)
- [CVE-2015-0976](https://insights.sbomify.com/CVE-2015-0976/): Cross-site scripting in inductiveautomation:ignition (medium 4.3)
- [CVE-2015-0974](https://insights.sbomify.com/CVE-2015-0974/): Privilege escalation in mobilis:mobiconnect (high 7.8)
- [CVE-2015-0973](https://insights.sbomify.com/CVE-2015-0973/): Memory corruption in apple:mac os x (high 8.8)
- [CVE-2015-0972](https://insights.sbomify.com/CVE-2015-0972/): Hardcoded credentials in pearson:proctorcache (medium 5.0)
- [CVE-2015-0971](https://insights.sbomify.com/CVE-2015-0971/): Denial of service in debian:debian linux (medium 5.0)
- [CVE-2015-0970](https://insights.sbomify.com/CVE-2015-0970/): Cross-site request forgery in searchblox:searchblox (high 8.8)
- [CVE-2015-0969](https://insights.sbomify.com/CVE-2015-0969/): Information disclosure in searchblox:searchblox (medium 5.0)
- [CVE-2015-0968](https://insights.sbomify.com/CVE-2015-0968/): File upload in searchblox:searchblox (high 7.5)
- [CVE-2015-0967](https://insights.sbomify.com/CVE-2015-0967/): Cross-site scripting in searchblox:searchblox (medium 4.3)
- [CVE-2015-0962](https://insights.sbomify.com/CVE-2015-0962/): Weak cryptography in barracuda:web filter (medium 4.3)
- [CVE-2015-0961](https://insights.sbomify.com/CVE-2015-0961/): Security feature bypass in barracuda:web filter (medium 4.3)
- [CVE-2015-0951](https://insights.sbomify.com/CVE-2015-0951/): Missing authorization in qualiteam:x-cart (medium 6.5)
- [CVE-2015-0950](https://insights.sbomify.com/CVE-2015-0950/): Cross-site scripting in qualiteam:x-cart (medium 4.3)
- [CVE-2015-0949](https://insights.sbomify.com/CVE-2015-0949/): Privilege escalation in EliteBook 850 G1 (high 7.8)
- [CVE-2015-0943](https://insights.sbomify.com/CVE-2015-0943/): Weak cryptography in basware:banking (medium 5.8)
- [CVE-2015-0941](https://insights.sbomify.com/CVE-2015-0941/): Weak cryptography in inetc project:inetc (medium 4.3)
- [CVE-2015-0938](https://insights.sbomify.com/CVE-2015-0938/): Missing authorization in blue coat:malware analysis appliance (medium 5.0)
- [CVE-2015-0937](https://insights.sbomify.com/CVE-2015-0937/): Cross-site scripting in blue coat:malware analysis appliance (medium 4.3)
- [CVE-2015-0936](https://insights.sbomify.com/CVE-2015-0936/): Hardcoded credentials in ceragon:fibeair ip-10 firmware (critical 9.8)
- [CVE-2015-0935](https://insights.sbomify.com/CVE-2015-0935/): Deserialization in bomgar:remote support (high 7.5)
- [CVE-2015-0934](https://insights.sbomify.com/CVE-2015-0934/): Command injection in sharelatex:sharelatex (medium 6.5)
- [CVE-2015-0933](https://insights.sbomify.com/CVE-2015-0933/): Path traversal in sharelatex:sharelatex (low 3.5)
- [CVE-2015-0932](https://insights.sbomify.com/CVE-2015-0932/): Missing authorization in antlabs:inngate ig 3.00 e (critical 10.0)
- [CVE-2015-0931](https://insights.sbomify.com/CVE-2015-0931/): Code injection in ektron:ektron content management system (medium 6.8)
- [CVE-2015-0930](https://insights.sbomify.com/CVE-2015-0930/): Hardcoded credentials in servision:hvg video gateway firmware (critical 10.0)
- [CVE-2015-0929](https://insights.sbomify.com/CVE-2015-0929/): Auth bypass in servision:hvg video gateway firmware (critical 10.0)
- [CVE-2015-0928](https://insights.sbomify.com/CVE-2015-0928/): Null dereference in oisf:libhtp (high 7.5)
- [CVE-2015-0926](https://insights.sbomify.com/CVE-2015-0926/): Misconfiguration in labtech software:labtech (medium 6.8)
- [CVE-2015-0925](https://insights.sbomify.com/CVE-2015-0925/): Code injection in ipass:ipass open mobile (critical 9.0)
- [CVE-2015-0924](https://insights.sbomify.com/CVE-2015-0924/): Hardcoded credentials in ceragon:fiberair ip-10c (high 7.8)
- [CVE-2015-0923](https://insights.sbomify.com/CVE-2015-0923/): XML external entity in ektron:ektron content management system (medium 5.0)
- [CVE-2015-0922](https://insights.sbomify.com/CVE-2015-0922/): Hardcoded credentials in mcafee:epolicy orchestrator (medium 5.0)
- [CVE-2015-0921](https://insights.sbomify.com/CVE-2015-0921/): XML external entity in mcafee:epolicy orchestrator (medium 4.0)
- [CVE-2015-0920](https://insights.sbomify.com/CVE-2015-0920/): Cross-site request forgery in banner effect header project:banner effect header (medium 6.8)
- [CVE-2015-0919](https://insights.sbomify.com/CVE-2015-0919/): SQL injection in sefrengo:sefrengo (high 7.5)
- [CVE-2015-0918](https://insights.sbomify.com/CVE-2015-0918/): Cross-site scripting in sefrengo:sefrengo (medium 4.3)
- [CVE-2015-0917](https://insights.sbomify.com/CVE-2015-0917/): Cross-site scripting in kajona:kajona (medium 4.3)
- [CVE-2015-0916](https://insights.sbomify.com/CVE-2015-0916/): SQL injection in cacti:cacti (medium 6.5)
- [CVE-2015-0915](https://insights.sbomify.com/CVE-2015-0915/): Cross-site scripting in rakus:maildealer (medium 4.3)
- [CVE-2015-0914](https://insights.sbomify.com/CVE-2015-0914/): Auth bypass in kozos:easyctf (medium 5.0)
- [CVE-2015-0913](https://insights.sbomify.com/CVE-2015-0913/): Cross-site scripting in kozos:easyctf (low 3.5)
- [CVE-2015-0912](https://insights.sbomify.com/CVE-2015-0912/): File upload in kozos:easyctf (medium 6.5)
- [CVE-2015-0911](https://insights.sbomify.com/CVE-2015-0911/): Path traversal in dounokouno:transmitmail (medium 5.0)
- [CVE-2015-0910](https://insights.sbomify.com/CVE-2015-0910/): Cross-site scripting in dounokouno:transmitmail (medium 4.3)
- [CVE-2015-0907](https://insights.sbomify.com/CVE-2015-0907/): Memory corruption in lhaplus:lhaplus (medium 6.8)
- [CVE-2015-0906](https://insights.sbomify.com/CVE-2015-0906/): Path traversal in lhaplus:lhaplus (medium 5.8)
- [CVE-2015-0905](https://insights.sbomify.com/CVE-2015-0905/): Cross-site request forgery in bblog project:bblog (medium 6.8)
- [CVE-2015-0904](https://insights.sbomify.com/CVE-2015-0904/): Weak cryptography in shidax:restaurant karaoke (medium 5.9)
- [CVE-2015-0903](https://insights.sbomify.com/CVE-2015-0903/): Memory corruption in hidemaru:editor (high 7.5)
- [CVE-2015-0902](https://insights.sbomify.com/CVE-2015-0902/): Information disclosure in semperfiwebdesign:all in one seo pack (medium 5.0)
- [CVE-2015-0901](https://insights.sbomify.com/CVE-2015-0901/): Cross-site scripting in flashy project:flashy (medium 4.3)
- [CVE-2015-0900](https://insights.sbomify.com/CVE-2015-0900/): Cross-site scripting in nishishi:fumy teachers schedule board (medium 4.3)
- [CVE-2015-0899](https://insights.sbomify.com/CVE-2015-0899/): Improper Input Validation in Apache Struts (high 7.5)
- [CVE-2015-0898](https://insights.sbomify.com/CVE-2015-0898/): Code injection in futomi:mp form mail cgi (high 7.5)
- [CVE-2015-0897](https://insights.sbomify.com/CVE-2015-0897/): Security feature bypass in LINE for Android (medium 5.9)
- [CVE-2015-0896](https://insights.sbomify.com/CVE-2015-0896/): Cross-site scripting in extplorer:extplorer (medium 4.3)
- [CVE-2015-0895](https://insights.sbomify.com/CVE-2015-0895/): Cross-site request forgery in tips and tricks hq:all in one wordpress security and firewall (medium 6.8)
- [CVE-2015-0894](https://insights.sbomify.com/CVE-2015-0894/): SQL injection in tips and tricks hq:all in one wordpress security and firewall (medium 6.0)
- [CVE-2015-0893](https://insights.sbomify.com/CVE-2015-0893/): Cross-site scripting in maroyaka relay novel project:maroyaka relay novel (medium 4.3)
- [CVE-2015-0892](https://insights.sbomify.com/CVE-2015-0892/): Cross-site scripting in maroyaka image album project:maroyaka image album (medium 4.3)
- [CVE-2015-0891](https://insights.sbomify.com/CVE-2015-0891/): Cross-site scripting in maroyaka simple board project:maroyaka simple board (medium 4.3)
- [CVE-2015-0890](https://insights.sbomify.com/CVE-2015-0890/): Security feature bypass in bestwebsoft:google captcha (medium 5.0)
- [CVE-2015-0889](https://insights.sbomify.com/CVE-2015-0889/): File upload in kent-web:joyful note (high 7.5)
- [CVE-2015-0888](https://insights.sbomify.com/CVE-2015-0888/): Other in kent-web:clip board (medium 6.4)
- [CVE-2015-0887](https://insights.sbomify.com/CVE-2015-0887/): Denial of service in iij:seil\/b1 (high 7.1)
- [CVE-2015-0886](https://insights.sbomify.com/CVE-2015-0886/): Integer Overflow or Wraparound in JBCrypt (medium 5.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2015/page/73/