CVEs published in April 2005
386 vulnerabilities, 15 critical, 0 exploited.
- rsa authentication agent for webCross-site scripting (XSS) vulnerability in IISWebAgentIF.dll in the RSA Authentication Agent for...4.3 Medium
- nprotect netizennProtect:Netizen 2005.3.17.1 does not properly verify that the update module is downloaded from...2.6 Low
- No product listedSQL injection vulnerability in admin/login.asp in aspclick.it ACNews 1.0 allows remote attackers...7.5 High
- s9y serendipitySQL injection vulnerability in exit.php for Serendipity 0.8 and earlier allows remote attackers...7.5 High
- apple quicktime pictureviewerPictureViewer in QuickTime for Windows 6.5.2 allows remote attackers to cause a denial of service...5.0 Medium
- sun javamailDirectory traversal vulnerability in the MimeBodyPart.getFileName method in JavaMail 1.3.2 allows...5.0 Medium
- centraMultiple cross-site scripting (XSS) vulnerabilities in Centra 7 allow remote attackers to inject...4.3 Medium
- wordpressMultiple cross-site scripting (XSS) vulnerabilities in template-functions-post.php in WordPress 1...6.8 Medium
- ibm lotus domino serverMultiple buffer overflows in Lotus Domino Server 6.0.5 and 6.5.4 allow remote attackers to cause...7.5 High
- salim gasmi gldFormat string vulnerability in the ErrorLog function in cnf.c in Greylisting daemon (GLD) 1.3 and...7.5 High
- runtime software getdataback for ntfsGetDataBack for NTFS 2.31 stores the username and license key in plaintext in the Name value in...2.1 Low
- rebrand p2p share spyRebrand P2P Share Spy 2.2 stores the user password in plaintext in the txtPassword value in the...4.6 Medium
- ocean12 technologies membership manager proCross-site scripting (XSS) vulnerability in main.asp for Ocean12 Membership Manager Pro 1.x...4.3 Medium
- popup plus plugin for miranda imBuffer overflow in the PopUp Plus 2.0.3.8 plugin for Miranda IM, with "Use SmileyAdd Setting"...7.5 High
- light speed technology deluxeftpLightspeed DeluxeFTP 6.01 stores usernames and passwords in plaintext in sites.xml, which is...7.2 High
- No product listedMaxthon 1.2.0 and 1.2.1 allows remote attackers to bypass the security ID and use restricted...7.5 High
- maxthonDirectory traversal vulnerability in the readFile and writeFile API for Maxthon 1.2.0 and 1.2.1...6.4 Medium
- dameware development mini remote control, nt utilities +1 moreUnknown vulnerability in DameWare NT Utilities 4.8 and earlier, and Mini Remote Control 4.8 and...7.2 High
- an an-httpdBuffer overflow in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to...6.4 Medium
- microsoft exchange serverHeap-based buffer overflow in the SvrAppendReceivedChunk function in xlsasink.dll in the SMTP...7.5 High
- microsoft wordBuffer overflow in Microsoft Word 2000, Word 2002, and Word 2003 allows remote attackers to...5.1 Medium
- microsoft internet explorerBuffer overflow in the URL processor of Microsoft Internet Explorer 5.01, 5.5, and 6 allows...7.5 High
- microsoft internet explorer, ie +1 moreRace condition in the memory management routines in the DHTML object processor in Microsoft...5.1 Medium
- microsoft windows 2000, windows xp, windows 2003 server +2 moreStack-based buffer overflow in WINSRV.DLL in the Client Server Runtime System (CSRSS) process of...10.0 High
- microsoft windows 2000, windows xp, windows 2003 server +2 moreBuffer overflow in Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows...2.1 Low
- kde, kmail +1 moreKMail 1.7.1 in KDE 3.3.2 allows remote attackers to spoof email information, such as whether the...5.0 Medium
- microsoft windows 2000, windows xp, windows 2003 server +3 more +5 moreThe document processing application used by the Windows Shell in Microsoft Windows 2000, Windows...7.5 High
- microsoft windows 2000, windows xp, windows 2003 server +3 more +5 moreThe kernel of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows...7.2 High
- microsoft windows 2000, windows xp, windows 2003 server +3 more +5 moreBuffer overflow in the font processing component of Microsoft Windows 2000, Windows XP SP1 and...7.2 High
- microsoft windows 2000, windows xp, windows 98 +1 more +3 moreBuffer overflow in the Message Queuing component of Microsoft Windows 2000 and Windows XP SP1...10.0 High
- microsoft windows xp, windows 2000 +1 moreMicrosoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Server 2003, and older operating systems...7.5 High
- No product listedcalendar.pl in CalendarScript 3.20 allows remote attackers to obtain sensitive information via...5.0 Medium
- calendarscript** DISPUTED ** NOTE: this issue has been disputed by the vendor. Cross-site scripting (XSS)...4.3 Medium
- calendarscript** DISPUTED ** NOTE: this issue has been disputed by the vendor. Cross-site scripting (XSS)...4.3 Medium
- easyphpcalendarpopup.php in EasyPHPCalendar before 6.2.8 allows remote attackers to obtain sensitive information...5.0 Medium
- easyphpcalendarCross-site scripting (XSS) vulnerability in index.php in EasyPHPCalendar before 6.2.8 allows...4.3 Medium
- desert dog software pinnacle cartCross-site scripting (XSS) vulnerability in index.php in Pinnacle Cart allows remote attackers to...4.3 Medium
- sygate technologies security agentSygate Security Agent (SSA) in Sygate Secure Enterprise 3.5 through 4.1 does not prevent the...4.6 Medium
- salim gasmi gldMultiple buffer overflows in the HandleChild function in server.c in Greylisting daemon (GLD) 1.3...10.0 High
- No product listedCross-site scripting (XSS) vulnerability in the control panel in aeDating 3.2 allows remote...4.3 Medium
- aewebworks aedatingSQL injection vulnerability in sdating.php in aeDating 3.2 allows remote attackers to execute...7.5 High
- aewebworks aedatingindex.php in aeDating 3.2 allows remote attackers to include arbitrary files via the skin parameter.5.0 Medium
- azerbaijan development group azdgdatingCross-site scripting (XSS) vulnerability in view.php in AzDGDatingPlatinum 1.1.0 allows remote...4.3 Medium
- sun sdkDirectory traversal vulnerability in the Java Archive Tool (Jar) utility in J2SE SDK 1.4.2 and 1...5.0 Medium
- No product listedSQL injection vulnerability in index.php for zOOm Media Gallery 2.1.2 allows remote attackers to...7.5 High
- xampp apache distributionXAMPP 1.4.x has multiple default or null passwords, which allows attackers to gain privileges.7.5 High
- xampp apache distributionMultiple cross-site scripting (XSS) vulnerabilities in XAMPP 1.4.x allow remote attackers to...4.3 Medium
- webctCross-site scripting (XSS) vulnerability in the discussion board functionality for WebCT Campus...4.3 Medium
- radscripts radbidsMultiple cross-site scripting (XSS) vulnerabilities in RadScripts RadBids Gold 2 allow remote...4.3 Medium
- radscripts radbidsSQL injection vulnerability in index.php for RadScripts RadBids Gold 2 allows remote attackers to...7.5 High
- Show moreLoading…