Concrete5 versions 5.7.3.1 and below suffer from multiple cross site scripting vulnerabilities.

Nakid CMS suffers from cross site request forgery, cross site scripting, and local file inclusion vulnerabilities.

Concrete5 versions 5.7.3.1 and below suffers from a sendmail-related remote code execution vulnerability.

HP WebInspect versions 7.x, 8.x, 9.x, and 10.0 through 10.4 suffer from an XML external entity vulnerability.

D-Link DSP-W110 suffers from command execution, remote file upload, and remote SQL injection vulnerabilities.

WordPress Paypal Currency Converter Basic For Woocommerce plugin version 1.3 suffers from a remote file read vulnerability.

OSSEC versions 2.7 through 2.8.1 suffer from a local root escalation vulnerability.

WordPress History Collection versions 1.1.1 and below suffers from an arbitrary file download vulnerability.

Adobe Connect version 9.3 suffers from a cross site scripting vulnerability.

SAP has released the monthly critical patch update for June 2015. This patch update closes buffer overflow, remote SQL injection, XML eXternal Entity, and hardcoded credentials vulnerabilities.