CVEs published in May 2005
437 vulnerabilities, 14 critical, 0 exploited.
- woppoware postmasterThe web mail service in Woppoware PostMaster 4.2.2 (build 3.2.5) generates different error...5.0 Medium
- microsoft windows xp, windows 2003 server +1 moreThe IPv6 support in Windows XP SP2, 2003 Server SP1, and Longhorn, with Windows Firewall turned...5.0 Medium
- gurgens ultimate forumGurgens (GASoft) Ultimate Forum 1.0 stores the db/Genid.dat database file under the web document...7.5 High
- gurgens guest bookGurgens (GASoft) Guest Book 2.1 stores the db/Genid.dat database file under the web document root...7.5 High
- fastream netfile ftp web serverThe default installation of Fastream NETFile FTP/Web Server 7.4.6, which supports FXP, does not...7.5 High
- keyvan1 imagegalleryKeyvan1 ImageGallery stores the image.mdb database under the web document root with insufficient...5.0 Medium
- 1two livre d orCross-site scripting (XSS) vulnerability in guestbook.php for 1Two Livre d'Or 1.0 allows remote...6.8 Medium
- redhat enterprise linux, enterprise linux desktop +1 moreThe xattr file system code, as backported in Red Hat Enterprise Linux 3 on 64-bit systems, does...2.1 Low
- sco unixwareThe X server in SCO UnixWare 7.1.1, 7.1.3, and 7.1.4 does not properly create socket directories...4.6 Medium
- jorg ruppel zoidcomThe ZCom_BitStream::Deserialize function in Zoidcom 1.0 beta 4 and earlier allows remote...5.0 Medium
- woltlab burning boardSQL injection vulnerability in the verify_email function in Woltlab Burning Board 2.x and earlier...7.5 High
- the ignition project ignitionservermod_channel in The Ignition Project ignitionServer 0.3.0 to 0.3.6, and possibly earlier versions,...2.1 Low
- the ignition project ignitionservermod_channel.bas in The Ignition Project ignitionServer 0.3.0 to 0.3.6, and possibly earlier...7.5 High
- atinegar sigma isp managerSQL injection vulnerability in Sigmaweb.DLL in Sigma ISP Manager 6.6 allows remote attackers to...7.5 High
- pixel-apes group safehtmlThe _writeAttrs function in SafeHTML before 1.3.2 does not properly handle quotes in attribute...4.3 Medium
- npdsMultiple SQL injection vulnerabilities in NPDS 4.8 and 5.0 allow remote attackers to execute...7.5 High
- mysqlmysql_install_db in MySQL 4.1.x before 4.1.12 and 5.x up to 5.0.4 creates the mysql_install_db.X...4.6 Medium
- jgs-xa jgs-portalJGS-XA JGS-Portal 3.0.2 and earlier allows remote attackers to obtain the full server path via...5.0 Medium
- jgs-xa jgs-portalMultiple cross-site scripting (XSS) vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow...4.3 Medium
- jgs-xa jgs-portalMultiple SQL injection vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote...7.5 High
- tavis rudd cheetahCheetah Path Search Order Hijacking7.2 High
- boobybooby.php in Booby 1.0.0 and earlier allows remote attackers to view private bookmarks by...5.0 Medium
- opentools attachment modUnknown vulnerability in Attachment Mod before 2.3.13, related to a "serious issue with realnames...7.5 High
- photopost php proSQL injection vulnerability in member.php for Photopost PHP Pro allows remote attackers to...7.5 High
- web-app.org webappapage.cgi in WebAPP 0.9.9.2.1, and possibly earlier versions, allows remote attackers to execute...7.5 High
- viewglobUnknown vulnerability in Viewglob before 2.0.1, related to "a potential security issue with the...2.1 Low
- No product listedMultiple buffer overflows in handlers.c for Pico Server (pServ) before 3.3 may allow attackers to...7.5 High
- linux kernelThe pkt_ioctl function in the pktcdvd block device ioctl handler (pktcdvd.c) in Linux kernel 2.6...7.2 High
- adobe version cue, apple mac os x +1 moreThe (1) stopserver.sh and (2) startserver.sh scripts in Adobe Version Cue on Mac OS X uses the...7.2 High
- linux kernelRaw character devices (raw.c) in the Linux kernel 2.6.x call the wrong function before passing an...7.2 High
- metalinks metacart e-shopCross-site scripting (XSS) vulnerability in productsByCategory.asp in MetaCart e-Shop allows...4.3 Medium
- postnuke software foundation postnukeDirectory traversal vulnerability in the pnModFunc function in pnMod.php for PostNuke 0.750...5.0 Medium
- soren boysen skull-splitter guestbookCross-site scripting (XSS) vulnerability in Skull-Splitter Guestbook 1.0, 2.0 and 2.2 allows...4.3 Medium
- phpheaven phpmychatMultiple cross-site scripting (XSS) vulnerabilities in (1) start_page.css.php3 (aka start-page...4.3 Medium
- yahoo messengerThe YMSGR URL handler in Yahoo! Messenger 5.x through 6.0 allows remote attackers to cause a...5.0 Medium
- willings webcam, webcam lite +1 moreWillings WebCam and WebCam Lite 2.8 and earlier stores the password in memory in plaintext, which...2.1 Low
- ultimate php board php boardviewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 allows remote attackers to obtain...7.5 High
- ultimate php board php boardviewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 may allow remote attackers to read...7.5 High
- ultimate php board php boardCross-site scripting (XSS) vulnerability in viewforum.php in Ultimate PHP Board (UPB) 1.8 through...6.8 Medium
- openbbCross-site scripting (XSS) vulnerability in member.php in Open Bulletin Board (OpenBB) 1.0.8...6.8 Medium
- openbbSQL injection vulnerability in read.php in Open Bulletin Board (OpenBB) 1.0.8 allows remote...7.5 High
- web crossing inc crossingCross-site scripting (XSS) vulnerability in WebX in Web Crossing 5.x allows remote attackers to...6.8 Medium
- tru-zone nukeetCross-site scripting (XSS) vulnerability in security.php for Tru-Zone NukeET 3.0 and 3.1 allows...6.8 Medium
- sun storedge 6130 arraysUnknown vulnerability in Sun StorEdge 6130 Arrays (SE6130) with serial numbers between 0451AWF00G...7.5 High
- spidean at-lite, autotheme +1 moreMultiple unknown vulnerabilities in the Blocks module in Spidean AutoTheme 1.7 and AT-Lite for...5.0 Medium
- remote cart cartCross-site scripting (XSS) vulnerability in shop.cgi in Remote Cart allows remote attackers to...6.8 Medium
- positive software h-sphere winboxH-Sphere Winbox 2.4.2 and 2.4.3 RC1 stores sensitive information such as username and password in...4.6 Medium
- positive software sitestudioCross-site scripting (XSS) vulnerability in the guestbook for SiteStudio 1.6 allows remote...6.8 Medium
- bugada andrea php advanced transfer managerPHP Advanced Transfer Manager (phpATM) 1.21 allows remote attackers to upload arbitrary files via...7.5 High
- niteenterprises remote file managerNiteEnterprises Remote File Manager 1.0 allows remote attackers to cause a denial of service ...5.0 Medium
- Show moreLoading…