CVE-2015-7369
The default Flash cross-domain policy (crossdomain.xml) in Revive Adserver before 3.2.2 does not restrict access cross domain access, which allows remote attackers to conduct cross domain attacks via unspecified vectors.
Date published : 2015-10-14
http://www.securityfocus.com/archive/1/536633/100/0/threaded