CVEs published in March 2005
343 vulnerabilities, 11 critical, 0 exploited.
- ximian evolutionEvolution 2.0.3 allows remote attackers to cause a denial of service (application crash or hang)...5.0 Medium
- subdreamer lightSQL injection vulnerability in index.php in Subdreamer Light, when magic_quotes_gpc is enabled,...7.5 High
- mailenable standardFormat string vulnerability in MailEnable 1.8 allows remote attackers to cause a denial of...5.0 Medium
- microsoft windows 2000The GetEnhMetaFilePaletteEntries API in GDI32.DLL in Windows 2000 allows remote attackers to...5.0 Medium
- asp press acs blogCross-site scripting (XSS) vulnerability in search.asp in ACS Blog 0.8 through 1.1b allows remote...4.3 Medium
- includer.cgiDirectory traversal vulnerability in includer.cgi in The Includer allows remote attackers to read...5.0 Medium
- mcnewsPHP remote file inclusion vulnerability in install.php in mcNews 1.3 and earlier allows remote...7.5 High
- No product listedDirectory traversal vulnerability in HolaCMS 1.4.9-1 allows remote attackers to overwrite...5.0 Medium
- wineWine 20050211 and earlier creates temp files with world readable permissions and predictable file...2.1 Low
- yabbCross-site scripting (XSS) vulnerability in usersrecentposts in YaBB 2.0 rc1 allows remote...4.3 Medium
- phorumMultiple cross-site scripting (XSS) vulnerabilities in Phorum before 5.0.15 allow remote...4.3 Medium
- phorumCross-site scripting (XSS) vulnerability in Phorum before 5.0.14a allows remote attackers to...4.3 Medium
- php arena pafiledbCross-site scripting (XSS) vulnerability in (1) viewall.php and (2) category.php for paFileDB 3.1...4.3 Medium
- php arena pafiledbSQL injection vulnerability in (1) viewall.php and (2) category.php in paFileDB 3.1 and earlier...7.5 High
- platinumftp platinumftpserverPlatinumFTP 1.0.18, and possibly earlier versions, allows remote attackers to cause a denial of...5.0 Medium
- photopost php proPhotoPost PHP 5.0 RC3 does not fully verify that an uploaded file is an image file, which allows...5.0 Medium
- photopost php proMultiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP 5.0 RC3 allow remote...4.3 Medium
- photopost php proadm-photo.php in PhotoPost PHP 5.0 RC3 does not properly verify administrative privileges before...5.0 Medium
- photopost php proThe reportpost action in misc.php for PhotoPost PHP 5.0 RC3 does not limit the logging data that...7.5 High
- mcafee antivirus engineBuffer overflow in McAfee Scan Engine 4320 with DAT version before 4436 allows remote attackers...7.5 High
- mcafee antivirus engineBuffer overflow in McAfee Scan Engine 4320 with DAT version before 4357 allows remote attackers...7.5 High
- aol instant messengerAOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application...5.0 Medium
- datarescue ida proFormat string vulnerability in DataRescue Interactive Disassembler and Debugger (IDA) Pro 4.7.0...7.5 High
- openslpMultiple buffer overflows in OpenSLP before 1.1.5 allow remote attackers to have an unknown...7.5 High
- goodtech systems telnet serverBuffer overflow in the administration web server for GoodTech Telnet Server 4.0 and 5.0, and...10.0 High
- ethereal group etherealUnknown vulnerability in the sFlow dissector in Ethereal 0.9.14 through 0.10.9 allows remote...5.0 Medium
- webroot software my firewall plusSmc.exe in My Firewall Plus 5.0 build 1117, and possibly other versions, does not drop privileges...2.1 Low
- kde dcopserver, desktop communication protocol daemon +1 moreDesktop Communication Protocol (DCOP) daemon, aka dcopserver, in KDE before 3.4 allows local...2.1 Low
- linux kernelNetfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service (memory...4.9 Medium
- linux kernelNetfilter in Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service (kernel...7.8 High
- ethereal group etherealThe GPRS-LLC dissector in Ethereal 0.10.7 through 0.10.9, with the "ignore cipher bit" option...5.0 Medium
- ethereal group etherealBuffer overflow in the Etheric dissector in Ethereal 0.10.7 through 0.10.9 allows remote...7.5 High
- mysql maxdbMySQL MaxDB 7.5.00 for Windows, and possibly earlier versions and other platforms, allows remote...5.0 Medium
- woodstone servers aliveServers Alive 4.1 and 5.0, when running as a service, does not drop SYSTEM privileges before...7.2 High
- oracle mysqlMySQL 4.1.9, and possibly earlier versions, allows remote attackers with certain privileges to...5.0 Medium
- novell ichainNovell iChain Mini FTP Server 2.3, and possibly earlier versions, does not limit the number of...7.5 High
- No product listedNovell iChain Mini FTP Server 2.3 displays different error messages if a user exists or not,...5.0 Medium
- zpanelZPanel 2.0 and 2.5 beta 10 does not remove or protect installation scripts after they have been...6.4 Medium
- zpanelPHP remote file inclusion vulnerability in zpanel.php in ZPanel allows remote attackers to (1)...7.5 High
- zpanelSQL injection vulnerability in ZPanel 2.0 allows remote attackers to execute arbitrary SQL...7.5 High
- linux kernelRace condition in the Radeon DRI driver for Linux kernel 2.6.8.1 allows local users with DRI...6.9 Medium
- suse linux, redhat enterprise linux, trustix secure linux +2 moreUnknown vulnerability in the PPP driver for the Linux kernel 2.6.8.1 allows remote attackers to...5.0 Medium
- hola holacmsHolaCMS 1.4.9 does not restrict file access to the holaDB/votes directory, which allows remote...5.0 Medium
- No product listedCross-site scripting (XSS) vulnerability in adframe.php in phpAdsNew 2.0.4-pr1, when...4.3 Medium
- phpadsnewphpAdsNew 2.0.4 allows remote attackers to obtain sensitive information via a direct request to ...5.0 Medium
- limewireDirectory traversal vulnerability in LimeWire 3.9.6 through 4.6.0 allows remote attackers to read...5.0 Medium
- limewireLimeWire 4.1.2 through 4.5.6 allows remote attackers to read arbitrary files by specifying the...5.0 Medium
- simpgbSQL injection vulnerability in gb_new.inc in SimpGB allows remote attackers to execute arbitrary...7.5 High
- ipsec-tools, kame racoon, altlinux alt linux +4 more +6 moreThe KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of...5.0 Medium
- frank mcingvale luxmanBuffer overflow in luxman before 0.41, if used with certain insecure svgalib libraries, allows...7.2 High
- Show moreLoading…