CVEs published in May 2005
437 vulnerabilities, 14 critical, 0 exploited.
- ibm lotus notesHTTP response splitting vulnerability in the @SetHTTPHeader function in Lotus Domino 6.5.x before...2.1 Low
- myphp forum forumMyPHP Forum 1.0 allows remote attackers to spoof the username by modifying the (1) nbuser...5.0 Medium
- No product listedMultiple cross-site scripting (XSS) vulnerabilities in JustWilliam's Amazon Webstore 04050100...6.8 Medium
- mtp-targetInteger signedness error in certain older versions of the NeL library, as used in Mtp-Target 1.2...5.0 Medium
- mtp-targetFormat string vulnerability in the client for Mtp-Target 1.2.2 and earlier allows remote...7.5 High
- apple mac os x, mac os x server +1 moreStack-based buffer overflow in the VPN daemon (vpnd) for Mac OS X before 10.3.9 allows local...7.2 High
- ubuntu linuxSSLeay.pm in libnet-ssleay-perl before 1.25 uses the /tmp/entropy file for entropy if a source is...4.6 Medium
- smartlistThe confirm add-on in SmartList 3.15 and earlier allows attackers to subscribe arbitrary e-mail...7.5 High
- phpcartphpcart.php in PHPCart 3.2 allows remote attackers to change product price information by...5.0 Medium
- php-calendarSQL injection vulnerability in search.php for PHP-Calendar before 0.10.3 allows remote attackers...7.5 High
- No product listedRace condition in Ce/Ceterm (aka ARPUS/Ce) 2.5.4 and earlier allows local users to write to...1.2 Low
- No product listedBuffer overflow in Ce/Ceterm (aka ARPUS/Ce) 2.5.4 and earlier may allow local users to gain...7.2 High
- esri arcinfo workstationFormat string vulnerability in ArcGIS for ESRI ArcInfo Workstation 9.0 allows local users to gain...7.2 High
- esri arcinfo workstationMultiple buffer overflows in ArcGIS for ESRI ArcInfo Workstation 9.0 allow local users to execute...4.6 Medium
- phpmyadminThe SQL install script in phpMyAdmin 2.6.2 is created with world-readable permissions, which...4.6 Medium
- apsis poundBuffer overflow in the add_port function in APSIS Pound 1.8.2 and earlier allows remote attackers...7.5 High
- survivorCross-site scripting (XSS) vulnerability in SURVIVOR before 0.9.6 allows remote attackers to...4.3 Medium
- kristofer szymanski cocktailCocktail 3.5.4 and possibly earlier in Mac OS X passes the administrative password on the command...7.2 High
- francisco burzi php-nukePHP-Nuke 7.6 and earlier allows remote attackers to obtain sensitive information via a direct...5.0 Medium
- apple safariSafari 1.3 allows remote attackers to cause a denial of service (application crash) via a long...2.6 Low
- coinsoft technologies phpcoinMultiple SQL injection vulnerabilities in phpCoin 1.2.2 allow remote attackers to execute...7.5 High
- oracle application serverThe OHS component 1.0.2 through 10.x, when UseWebcacheIP is disabled, in Oracle Application...7.5 High
- oracle application server web cacheThe webcacheadmin module in Oracle Webcache 9i allows remote attackers to corrupt arbitrary files...5.0 Medium
- oracle application server web cacheMultiple cross-site scripting (XSS) vulnerabilities in Oracle Webcache 9i allow remote attackers...6.8 Medium
- bea weblogic serverCross-site scripting (XSS) vulnerability in BEA Admin Console 8.1 allows remote attackers to...6.8 Medium
- mandrakesoft mandrake lam-runtimeThe LAM runtime environment package (lam-runtime-7.0.6-2mdk) on Mandrake Linux installs the mpi...4.6 Medium
- oxpus phpbb personal notes moduleSQL injection vulnerability in posting_notes.php in the notes module for phpBB allows remote...7.5 High
- clarolineMultiple PHP remote file inclusion vulnerabilities in Claroline 1.5.3 through 1.6 Release...7.5 High
- clarolineMultiple directory traversal vulnerabilities in (1) document.php or (2) insertMyDoc.php in...7.5 High
- clarolineMultiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and...7.5 High
- clarolineMultiple cross-site scripting (XSS) vulnerabilities in Claroline 1.5.3 through 1.6 Release...6.8 Medium
- dream4 koobi cmsMultiple SQL injection vulnerabilities in index.php in Dream4 Koobi CMS 4.2.3 allow remote...7.5 High
- bakbone netvaultnvstatsmngr.exe process in BakBone NetVault 7.1 does not properly drop privileges before opening...4.6 Medium
- bulletproof ftp serverBPFTPServer service in BulletProof FTP Server 2.4.0.31 does not properly drop privileges before...7.2 High
- hp openview radia management portalUnknown vulnerability in Radia Management Agent (RMA) in HP OpenView Radia Management Portal (RMP...7.5 High
- linux kernelThe (1) it87 and (2) via686a drivers in I2C for Linux 2.6.x before 2.6.11.8, and 2.6.12 before 2...2.1 Low
- linux kernelThe key_user_lookup function in security/keys/key.c in Linux kernel 2.6.10 to 2.6.11.8 may allow...1.2 Low