CVEs published in May 2005
437 vulnerabilities, 14 critical, 0 exploited.
- postnukeThe RSS module in PostNuke 0.750 and 0.760RC2 and RC3 allows remote attackers to obtain sensitive...5.0 Medium
- postnuke software foundation postnukeMultiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.750 and 0.760RC3 allow remote...2.6 Low
- postnuke software foundation postnukeMultiple cross-site scripting (XSS) vulnerabilities in the RSS module in PostNuke 0.750 and 0...2.6 Low
- postnuke software foundation postnukeMultiple SQL injection vulnerabilities in Xanthia.php in the Xanthia module in PostNuke 0.750...7.5 High
- broadcom etrust antivirus, etrust intrusion detection, etrust secure content manager +8 more +10 moreInteger overflow in Computer Associates Vet Antivirus library, as used by CA InoculateIT 6.0,...10.0 High
- xine gxineFormat string vulnerability in gxine 0.4.1 through 0.4.4, and other versions down to 0.3, allows...7.5 High
- wordpressWordpress 1.5 and earlier allows remote attackers to obtain sensitive information via a direct...5.0 Medium
- wordpressSQL injection vulnerability in wp-trackback.php in Wordpress 1.5 and earlier allows remote...7.5 High
- gnome geditFormat string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service ...2.6 Low
- episodex guestbookepisodex guestbook allows remote attackers to bypass authentication and edit scripts via a direct...7.5 High
- episodex guestbookCross-site scripting (XSS) vulnerability in default.asp for episodex guestbook allows remote...4.3 Medium
- microsoft wordBuffer overflow in winword.exe 10.2627.6714 and earlier in Microsoft Word for the Macintosh,...2.6 Low
- solstice internet mail server** DISPUTED ** JavaMail API, as used by Solstice Internet Mail Server POP3 2.0, does not...2.1 Low
- bugada andrea php advanced transfer managerPHP remote file inclusion vulnerability in common.php in phpATM 1.21, and possibly earlier...7.5 High
- d-link dsl-502t, dsl-504t, dsl-562t +1 more +3 moreD-Link DSL-502T, DSL-504T, DSL-562T, and DSL-G604T, when /cgi-bin/firmwarecfg is executed, allows...7.5 High
- timo rossi picasmStack-based buffer overflow in the error directive in picasm 1.12b and earlier allows attackers...5.1 Medium
- groove workspace, virtual office +1 moreGroove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before...2.6 Low
- groove workspace, virtual office +1 moreUnknown vulnerability in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and...7.5 High
- groove workspace, virtual office +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Groove Mobile Workspace in Groove Virtual...6.8 Medium
- groove workspace, virtual office +1 moreGroove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before...4.6 Medium
- rob flynn gaimGaim before 1.3.1 allows remote attackers to cause a denial of service (crash) via a malformed...5.0 Medium
- helpcenterlive help center liveCross-Site Request Forgery (CSRF) vulnerability in Help Center Live allows remote attackers to...6.5 Medium
- ubertec help center liveMultiple SQL injection vulnerabilities in Help Center Live allow remote attackers to execute...7.5 High
- ubertec help center liveMultiple cross-site scripting (XSS) vulnerabilities in Help Center Live allow remote attackers to...4.3 Medium
- yahoo messengerThe Logfile feature in Yahoo! Messenger 5.x through 6.0 can be activated by a YMSGR: URL and...2.1 Low
- extremenetworks extremeware xosUnknown vulnerability in Extreme BlackDiamond 10808 and 8800 switches running ExtremeWare XOS 11...4.6 Medium
- apple mac os xCertain system calls in Apple Mac OS X 10.4.1 do not properly enforce the permissions of certain...2.1 Low
- freeradiusBuffer overflow in the sql_escape_func function in the SQL module for FreeRADIUS 1.0.2 and...7.5 High
- freeradiusSQL injection vulnerability in the radius_xlat function in the SQL module for FreeRADIUS 1.0.2...7.5 High
- bzip bzip2, apple mac os x, canonical ubuntu linux +1 more +3 morebzip2 allows remote attackers to cause a denial of service (hard drive consumption) via a crafted...5.0 Medium
- dnnsoftware dotnetnukeMultiple cross-site scripting (XSS) vulnerabilities in DotNetNuke before 3.0.12 allow remote...4.3 Medium
- debian ppxpppxp does not drop root privileges before opening log files, which allows local users to execute...7.2 High
- yusasp web asset managerYusASP Web Asset Manager 1.0 allows remote attackers to gain privileges via a direct request to...7.5 High
- datatrac activity consoleDataTrac Activity Console 1.1 allows remote attackers to cause a denial of service via a long...5.0 Medium
- orenosv http ftp serverMultiple buffer overflows in Orenosv HTTP/FTP Server 0.8.1 allow remote authenticated users to...7.5 High
- microsoft asp.netThe __VIEWSTATE functionality in Microsoft ASP.NET 1.x, when not cryptographically signed, allows...5.0 Medium
- microsoft asp.netThe __VIEWSTATE functionality in Microsoft ASP.NET 1.x allows remote attackers to conduct replay...6.4 Medium
- jeuce personal web serverJeuce Personal Web Server 2.13 allows remote attackers to cause a denial of service (server crash...5.0 Medium
- No product listedDirectory traversal vulnerability in Jeuce Personal Web Server 2.13 allows remote attackers to...5.0 Medium
- jeuce personal web serverJeuce Personal Webserver 2.13 allows remote attackers to cause a denial of service (server crash)...5.0 Medium
- htmljunction ezguestbookHTMLJunction EZGuestbook stores the guestbook.mdb file under the web document root with...7.5 High
- No product listedCross-site scripting (XSS) vulnerability in filemanager.cpp in MyServer 0.8 allows remote...4.3 Medium
- myserverDirectory traversal vulnerability in filemanager.cpp in MyServer 0.8 allows remote attackers to...5.0 Medium
- mercur messagingMultiple directory traversal vulnerabilities in Mercur Messaging 2005 SP2 allow remote attackers...7.5 High
- mercur messagingMercur Messaging 2005 SP2 allows remote attackers to read the source code of .ctml files via a...5.0 Medium
- aol instant messengerAOL Instant Messenger 5.5.x and earlier allows remote attackers to cause a denial of service ...5.0 Medium
- hostingcontroller hosting controllerHosting Controller 6.1 Hotfix 1.9 and earlier allows remote attackers to register arbitrary users...7.5 High
- woppoware postmasterCross-site scripting (XSS) vulnerability in message.htm for Woppoware PostMaster 4.2.2 (build 3.2...6.8 Medium
- woppoware postmastermessage.htm for Woppoware PostMaster 4.2.2 (build 3.2.5) allows remote attackers to bypass...7.5 High
- woppoware postmasterDirectory traversal vulnerability in message.htm for Woppoware PostMaster 4.2.2 (build 3.2.5)...7.5 High
- Show moreLoading…