Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2016-02-07	CVE-2016-1307	Credentials Management vulnerability in multiple products The Openfire server in Cisco Finesse Desktop 10.5(1) and 11.0(1) and Unified Contact Center Express 10.6(1) has a hardcoded account, which makes it easier for remote attackers to obtain access via an XMPP session, aka Bug ID CSCuw79085. network low complexity zyxel zzinc CWE-255	5.4
2015-12-31	CVE-2015-6017	Cross-site Scripting vulnerability in Zyxel P-660Hw-T1 V2 Firmware 3.40(Axh.0) Multiple cross-site scripting (XSS) vulnerabilities in Forms/rpAuth_1 on ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40(AXH.0) allow remote attackers to inject arbitrary web script or HTML via the (1) LoginPassword or (2) hiddenPassword parameter. network low complexity zyxel CWE-79	6.1