Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2005
March

CVEs published in March 2005

343 vulnerabilities, 11 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

hosting controller controllerThe password recovery feature (forgotpassword.asp) in Hosting Controller 6.1 Hotfix 1.7 and...CVE-2005-06955.0 MediumMarch 7, 2005
hosting controller controllerHosting Controller 6.1 Hotfix 1.7 and earlier stores log files under the web root, which allows...CVE-2005-06945.0 MediumMarch 7, 2005
jowood productions chaserBuffer overflow in JoWood Chaser 1.50 and earlier allows remote attackers to cause a denial of...CVE-2005-06937.5 HighMarch 7, 2005
gene6 g6 ftp serverGene6 FTP Server does not properly restrict access to the control console, which allows local...CVE-2005-06902.1 LowMarch 7, 2005
jimmy the includerincluder.cgi in The Includer allows remote attackers to execute arbitrary commands via shell...CVE-2005-0689Public exploit7.5 HighMarch 7, 2005
mltermInteger overflow in mlterm 2.5.0 through 2.9.1, with gdk-pixbuf support enabled, allows remote...CVE-2005-0686Fix available7.5 HighMarch 7, 2005
drupalCross-site scripting (XSS) vulnerability in common.inc in Drupal before 4.5.2 allows remote...CVE-2005-06824.3 MediumMarch 7, 2005
No product listedPHP remote file inclusion vulnerability in download_center_lite.inc.php for Download Center Lite...CVE-2005-0680Public exploit7.5 HighMarch 7, 2005
stadtaus tell a friend scriptPHP remote file inclusion vulnerability in tell_a_friend.inc.php for Tell A Friend Script 2.7...CVE-2005-06797.5 HighMarch 7, 2005
stadtaus form mail scriptPHP remote file inclusion vulnerability in formmail.inc.php for Form Mail Script 2.3 and earlier...CVE-2005-0678Public exploit7.5 HighMarch 7, 2005
phpoutsourcing zorumindex.php for Zorum 3.5 allows remote attackers to perform certain actions as other users by...CVE-2005-06775.0 MediumMarch 7, 2005
phpoutsourcing zorumindex.php in Zorum 3.5 allows remote attackers to trigger an SQL error, and possibly inject...CVE-2005-06767.5 HighMarch 7, 2005
phpoutsourcing zorumCross-site scripting (XSS) vulnerability in index.php for Zorum 3.5 allows remote attackers to...CVE-2005-06754.3 MediumMarch 7, 2005
phpbb group phpbbCross-site scripting (XSS) vulnerability in usercp_register.php for phpBB 2.0.13 allows remote...CVE-2005-06734.3 MediumMarch 7, 2005
ca3deCarsten's 3D Engine (Ca3DE), March 2004 version and earlier, allows remote attackers to execute...CVE-2005-06727.5 HighMarch 7, 2005
coinsoft technologies phpcoinCross-site scripting (XSS) vulnerability in phpCOIN 1.2.0 through 1.2.1b allows remote attackers...CVE-2005-0670Public exploit4.3 MediumMarch 7, 2005
coinsoft technologies phpcoinMultiple SQL injection vulnerabilities in mod.php for phpCOIN 1.2.0 through 1.2.1b allow remote...CVE-2005-06697.5 HighMarch 7, 2005
sylpheed, altlinux alt linux, gentoo linux +4 more +6 moreBuffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers...CVE-2005-0667Fix available5.1 MediumMarch 7, 2005
the pax team pax linuxUnknown vulnerability in PaX from the September 2003 release to 2.2 before 2005.03.05, related to...CVE-2005-0666Public exploit4.6 MediumMarch 7, 2005
john bradley xvFormat string vulnerability in xv before 3.10a allows remote attackers to execute arbitrary code...CVE-2005-06655.1 MediumMarch 7, 2005
mercuryboardSQL injection vulnerability in index.php for MercuryBoard 1.1.2 allows remote attackers to inject...CVE-2005-06637.5 HighMarch 7, 2005
mercuryboardCross-site scripting (XSS) vulnerability in index.php for MercuryBoard 1.1.2 allows remote...CVE-2005-06624.3 MediumMarch 7, 2005
woltlab burning boardSQL injection vulnerability in the getwbbuserdata function in session.php for Woltlab Burning...CVE-2005-06617.5 HighMarch 7, 2005
adalis d-forumMultiple cross-site scripting (XSS) vulnerabilities in D-Forum 1.11 allows remote attackers to...CVE-2005-06604.3 MediumMarch 7, 2005
phpbb group phpbbphpBB 2.0.13 and earlier allows remote attackers to obtain sensitive information via a direct...CVE-2005-06595.0 MediumMarch 7, 2005
cmw linklist linklistSQL injection vulnerability in a third party extension to TYPO3 allows remote attackers to...CVE-2005-06587.5 HighMarch 7, 2005
computalynx cproxyDirectory traversal vulnerability in Computalynx CProxy 3.3.x and 3.4.x through 3.4.4 allows...CVE-2005-06576.4 MediumMarch 7, 2005
arif supriyanto auracmsMultiple cross-site scripting (XSS) vulnerabilities in auraCMS 1.5 allow remote attackers to...CVE-2005-06564.3 MediumMarch 7, 2005
arif supriyanto auracmsauraCMS 1.5 allows remote attackers to obtain sensitive information via an HTTP request with an...CVE-2005-06555.0 MediumMarch 7, 2005
gimpgifload.exe in GIMP 2.0.5, 2.2.3, and possibly 2.2.4 allows remote attackers or local users to...CVE-2005-06545.0 MediumMarch 7, 2005
phpmyadminphpMyAdmin 2.6.1 does not properly grant permissions on tables with an underscore in the name,...CVE-2005-0653Fix available4.6 MediumMarch 7, 2005
hp openvmsUnknown vulnerability in HP OpenVMS VAX 7.x and 6.x and OpenVMS Alpha 7.x or 6.x allows local...CVE-2005-06522.1 LowMarch 7, 2005
sun solaris answerbook2Cross-site scripting (XSS) vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier...CVE-2005-0548Public exploit4.3 MediumMarch 7, 2005
imagemagickFormat string vulnerability in the SetImageInfo function in image.c for ImageMagick before 6.0.2...CVE-2005-0397Fix available7.5 HighMarch 7, 2005
abuse abuse-sdlThe SDL port of abuse (abuse-SDL) before 2.00 does not properly drop privileges before creating...CVE-2005-00992.1 LowMarch 7, 2005
abuse abuse-sdlMultiple buffer overflows in the SDL port of abuse (abuse-SDL) before 2.00 allow local users to...CVE-2005-00984.6 MediumMarch 7, 2005
php fusion fusionCross-site scripting (XSS) vulnerability in fusion_core.php for PHP-Fusion 5.x allows remote...CVE-2005-06924.3 MediumMarch 6, 2005
socialmpnPHP remote file inclusion vulnerability in article mode for modules.php in SocialMPN allows...CVE-2005-0691Public exploit7.5 HighMarch 6, 2005
hashcashFormat string vulnerability in Hashcash 1.16 allows remote attackers to cause a denial of service...CVE-2005-0687Fix available7.5 HighMarch 6, 2005
nokia seriesNokia Symbian 60 allows remote attackers to cause a denial of service (phone restart) via a...CVE-2005-0681Public exploit5.0 MediumMarch 6, 2005
microsoft windows 2003 server, windows xp +1 moreWindows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to...CVE-2005-0688Public exploitEPSS 47.4%5.0 MediumMarch 5, 2005
freebsd, redhat enterprise linux, enterprise linux desktop +5 more +7 moreHyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel...CVE-2005-01095.6 MediumMarch 5, 2005
christian hilgers http anti virus proxy \(havp\)Unknown vulnerability in HTTP Anti Virus Proxy (HAVP) before 0.51 prevents viruses from being...CVE-2005-06687.5 HighMarch 4, 2005
projectbbMultiple SQL injection vulnerabilities in ProjectBB 0.4.5.1 allow remote attackers to execute...CVE-2005-06517.5 HighMarch 4, 2005
projectbbMultiple cross-site scripting (XSS) vulnerabilities in ProjectBB 0.4.5.1 allow remote attackers...CVE-2005-0650Public exploit4.3 MediumMarch 4, 2005
pixel-apes group safehtmlPixel-Apes SafeHTML before 1.2.1 allows remote attackers to bypass cross-site scripting (XSS)...CVE-2005-06494.3 MediumMarch 4, 2005
pixel-apes group safehtmlMultiple vulnerabilities in Pixel-Apes SafeHTML before 1.3.0 allow remote attackers to bypass...CVE-2005-06484.3 MediumMarch 4, 2005
php arena panewsadmin_setup.php in paNews 2.0.4b allows remote attackers to inject arbitrary PHP code via the (1)...CVE-2005-0647Public exploit5.0 MediumMarch 4, 2005
php arena panewsSQL injection vulnerability in auth.php in paNews 2.0.4b allows remote attackers to execute...CVE-2005-06467.5 HighMarch 4, 2005
No product listedCross-site scripting (XSS) vulnerability in show.inc.php in cuteNews 1.3.6 allows remote...CVE-2005-06454.3 MediumMarch 4, 2005
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open