Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2005
May

CVEs published in May 2005

437 vulnerabilities, 14 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

net56 file managerSQL injection vulnerability in login.asp for Net56 Browser Based File Manager 1.0 allows remote...CVE-2005-16027.5 HighMay 16, 2005
mro software maximo self serviceMRO Maximo Self Service 4 and 5 stores certain information under the web document root using file...CVE-2005-16015.0 MediumMay 16, 2005
libtomcryptA "mathematical flaw" in the implementation of the El Gamal signature algorithm for LibTomCrypt 1...CVE-2005-16007.5 HighMay 16, 2005
kryloff technologies subject search serverCross-site scripting (XSS) vulnerability in Kryloff Technologies Subject Search Server (SSServer)...CVE-2005-15994.3 MediumMay 16, 2005
invision power services board, power board +1 moreSQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote...CVE-2005-1598Public exploitEPSS 13.9%7.5 HighMay 16, 2005
invision power services board, power board +1 moreCross-site scripting (XSS) vulnerability in (1) search.php and (2) topics.php for Invision Power...CVE-2005-1597Public exploit4.3 MediumMay 16, 2005
fusion sbxindex.php in Fusion SBX 1.2 and earlier does not properly use the extract function, which allows...CVE-2005-159610.0 HighMay 16, 2005
codethat shoppingcartCodeThat ShoppingCart 1.3.1 stores config.ini under the web root, which allows remote attackers...CVE-2005-15955.0 MediumMay 16, 2005
codethat shoppingcartSQL injection vulnerability in catalog.php for CodeThat ShoppingCart 1.3.1 allows remote...CVE-2005-1594Public exploit7.5 HighMay 16, 2005
codethat shoppingcartCross-site scripting (XSS) vulnerability in catalog.php for CodeThat ShoppingCart 1.3.1 allows...CVE-2005-1593Public exploit6.8 MediumMay 16, 2005
birdblogMultiple "javascript vulerabilities in BB code" in BirdBlog before 1.3.1 allow remote attackers...CVE-2005-15927.5 HighMay 16, 2005
sun solaris, sunos +1 moreUnknown vulnerability in NIS+ on Solaris 7, 8, and 9 allows remote attackers to cause a denial of...CVE-2005-15915.0 MediumMay 16, 2005
altiris client service, deployment solution +1 moreThe Altiris Client Service for Windows (ACLIENT.EXE) 6.0.88 allows local users to disable...CVE-2005-1590Public exploit4.6 MediumMay 16, 2005
pico server serverPico Server (pServ) 3.2 and earlier allows local users to read arbitrary files as the pServ user...CVE-2005-13677.5 HighMay 16, 2005
pico server serverPico Server (pServ) 3.2 and earlier allows remote attackers to obtain the source code for CGI...CVE-2005-1366Public exploit7.5 HighMay 16, 2005
pico server serverPico Server (pServ) 3.2 and earlier allows remote attackers to execute arbitrary commands via a...CVE-2005-1365Public exploitEPSS 12.0%10.0 HighMay 16, 2005
apple itunesBuffer overflow in Apple iTunes before 4.8 allows remote attackers to execute arbitrary code via...CVE-2005-12487.5 HighMay 16, 2005
phpbb group phpbbThe bbencode_second_pass and make_clickable functions in bbcode.php for phpBB before 2.0.15, as...CVE-2005-1193Public exploitEPSS 16.4%7.5 HighMay 16, 2005
open solution quick.cartCross-site scripting (XSS) vulnerability in index.php for Quick.cart 0.3.0 allows remote...CVE-2005-1587Public exploit4.3 MediumMay 14, 2005
open solution quick.forumQuick.Forum 2.1.6 stores potentially sensitive information such as usernames, banned IP addresses...CVE-2005-15865.0 MediumMay 14, 2005
open solution quick.forumCross-site scripting (XSS) vulnerability in index.php for Quick.Forum 2.1.6 allows remote...CVE-2005-15844.3 MediumMay 14, 2005
1two news1Two News 1.0 allows remote attackers to (1) delete images for new stories via a direct request...CVE-2005-15835.0 MediumMay 14, 2005
1two newsCross-site scripting (XSS) vulnerability in index.php for 1Two News 1.0 allows remote attackers...CVE-2005-15824.3 MediumMay 14, 2005
eric fichot bug reportCross-site scripting (XSS) vulnerability in Bug Report 1.0 allows remote attackers to inject...CVE-2005-15814.3 MediumMay 14, 2005
apg technology classmasterAPG Technology ClassMaster does not properly restrict access to sensitive folders, which allows...CVE-2005-15777.5 HighMay 14, 2005
mozilla firefoxThe file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows allows remote attackers to...CVE-2005-15755.0 MediumMay 14, 2005
microsoft windows media playerWindows Media Player 9 and 10, in certain cases, allows content protected by Windows Media...CVE-2005-15747.5 HighMay 14, 2005
wenig and spitzer-williams showoff digital media softwareMultiple directory traversal vulnerabilities in ShowOff! 1.5.4 allow remote attackers to read...CVE-2005-15715.0 MediumMay 14, 2005
battleaxe software bttlxeforumforum.asp in bttlxeForum 2.0 allows remote attackers to obtain full path information via a...CVE-2005-15705.0 MediumMay 14, 2005
directtopicsCross-site scripting (XSS) vulnerability in DirectTopics 2.1 and 2.2 allows remote attackers to...CVE-2005-15694.3 MediumMay 14, 2005
arcowave systems wlan ap \+ adsl routerAcrowave AAP-3100AR wireless router allows remote attackers to bypass authentication by pressing...CVE-2005-15667.5 HighMay 14, 2005
mozilla bugzillaBugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 displays a different error message depending on...CVE-2005-15635.0 MediumMay 14, 2005
gamespy sdk cd-key validation toolkitGamespy cd-key validation system allows remote attackers to cause a denial of service (cd-key...CVE-2005-15565.0 MediumMay 14, 2005
wowbb web forumSQL injection vulnerability in view_user.php in WowBB 1.6, 1.61, and 1.62 allows remote attackers...CVE-2005-15547.5 HighMay 14, 2005
geovision digital surveillance systemGeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0 uses a weak encryption scheme to...CVE-2005-15537.5 HighMay 14, 2005
geovision digital surveillance systemGeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0, when set to create JPEG images,...CVE-2005-1552Public exploit5.0 MediumMay 14, 2005
sophos anti-virusSophos Anti-Virus 3.93 does not check downloaded files for viruses when they have only been...CVE-2005-15515.1 MediumMay 14, 2005
colored scripts easy message boardeasymsgb.pl in Easy Message Board allows remote attackers to execute arbitrary commands via shell...CVE-2005-1550Public exploit7.5 HighMay 14, 2005
colored scripts easy message boardDirectory traversal vulnerability in easymsgb.pl in Easy Message Board allows remote attackers to...CVE-2005-15495.0 MediumMay 14, 2005
advanced guestbook guestbookSQL injection vulnerability in index.php in Advanced Guestbook 2.3.1 allows remote attackers to...CVE-2005-1548Public exploit7.5 HighMay 14, 2005
bakbone netvaultHeap-based buffer overflow in the demo version of Bakbone Netvault, and possibly other versions,...CVE-2005-1547Public exploit7.5 HighMay 14, 2005
ht editor editorBuffer overflow in the PE parser in HT Editor before 0.8.0 allows remote attackers to execute...CVE-2005-1546Fix available5.1 MediumMay 14, 2005
ht editor editorInteger overflow in the ELF parser in HT Editor before 0.8.0 allows remote attackers to execute...CVE-2005-1545Fix available5.1 MediumMay 14, 2005
libtiffStack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary...CVE-2005-1544Public exploitFix availableEPSS 14.4%7.5 HighMay 14, 2005
guidance software encaseEnCase Forensic Edition 4.18a does not support Device Configuration Overlays (DCO), which allows...CVE-2005-15782.1 LowMay 13, 2005
gnu gzip, canonical ubuntu linux +1 morezgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to...CVE-2005-0758Fix available4.6 MediumMay 13, 2005
apple quicktimeApple QuickTime Player 7.0 on Mac OS X 10.4 allows remote attackers to obtain sensitive...CVE-2005-15795.0 MediumMay 12, 2005
mozilla firefoxThe file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows uses the Content-Type HTTP...CVE-2005-15762.6 LowMay 12, 2005
directtopicstopic.php in DirectTopics 2.1 and 2.2 allows remote attackers to obtain sensitive information via...CVE-2005-15685.0 MediumMay 12, 2005
directtopicsSQL injection vulnerability in topic.php in DirectTopics 2.1 and 2.2 allows remote attackers to...CVE-2005-15677.5 HighMay 12, 2005
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open