NVD CVE-2014-3500 November 15, 2014 007admin Apache Cordova Android before 3.5.1 allows remote attackers to change the start page via a crafted intent URL.