SA-CONTRIB-2015-046 - Taxonomy Tools - Cross Site Scripting (XSS)
See SA-CONTRIB-2015-040 - Webform prepopulate block - Cross Site Scripting (XSS)
SA-CONTRIB-2015-037 - Node Title disclosure on 403 Not Found page
See SA-CONTRIB-2015-035 - Ajax Timeline - Cross Site Scripting (XSS).
See SA-CONTRIB-2015-034 - Commerce WeDeal - Open Redirect
See SA-CONTRIB-2015-032 - Node Invite - Multiple vulnerabilities