Cisco products multiple vulnerabilities

Two vulnerabilities were identified in Cisco Web Security Virtual Appliance (WSAv) and Cisco Email Security Virtual Appliance (ESAv).  A remote user can gain full control the target system and decrypt and impersonate communications between target devices. [ CVE-2015-4216, CVE-2015-4217]

Several vulnerabilities were identified in Cisco Unified Communications Manager IM and Presence Service. A remote authenticated user can gain elevated privileges on the target system and inject SQL commands. [CVE-2015-4221, CVE-2015-4222]

A vulnerability was identified in Cisco IOS XR. A remote user can cause denial of service conditions on the target system. [CVE-2015-4223]

A vulnerability was identified in Cisco Identity Services Engine and Cisco Secure Access Control Server. A remote authenticated user can obtain potentially sensitive information on the target system. [CVE-2015-4219]

A vulnerability was identified in Cisco NX-OS. A remote authenticated user can obtain decrypted passwords. [CVE-2015-4213]

A vulnerability was identified in Cisco Jabber for Windows. A remote user can obtain potentially sensitive information on the target system. [CVE-2015-4218]