CVEs published in May 2005
437 vulnerabilities, 14 critical, 0 exploited.
- shtoolRace condition in shtool 2.0.1 and earlier allows local users to create or modify arbitrary files...3.7 Low
- distinct web creations newsletterezSQL injection vulnerability in login.asp in ezdwc NewsletterEz 3.0 allows remote attackers to...7.5 High
- novell zenworks, zenworks desktops, zenworks remote management +2 more +4 moreMultiple stack-based and heap-based buffer overflows in Remote Management authentication ...7.5 High
- ipswitch imail, imail server, collaboration suite +2 moreStack-based buffer overflow in the IMAP daemon (IMAPD32.EXE) in IMail 8.13 in Ipswitch...10.0 High
- ipswitch imail, imail server, collaboration suite +2 moreMultiple stack-based buffer overflows in the IMAP server in IMail 8.12 and 8.13 in Ipswitch...10.0 High
- ipswitch imailStack-based buffer overflow in the IMAP server for Ipswitch IMail 8.12 and 8.13, and other...5.0 Medium
- ipswitch imail, imail server +1 moreDirectory traversal vulnerability in the Web Calendaring server in Ipswitch Imail 8.13, and other...5.0 Medium
- ipswitch collaboration suiteThe IMAP daemon (IMAPD32.EXE) in Ipswitch Collaboration Suite (ICS) allows remote attackers to...5.0 Medium
- debian qpopperpopauth.c in qpopper 4.0.5 and earlier does not properly set the umask, which may cause qpopper...2.1 Low
- debian qpopperqpopper 4.0.5 and earlier does not properly drop privileges before processing certain user...7.2 High
- bea weblogic server, oracle weblogic portal +1 moreBuffer overflow in BEA WebLogic Server and WebLogic Express 6.1 Service Pack 4 allows remote...5.0 Medium
- bea weblogic server, oracle weblogic portal +1 moreThe embedded LDAP server in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0...5.0 Medium
- bea weblogic server, oracle weblogic portal +1 moreMultiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and Express 8.1...6.8 Medium
- bea weblogic server, oracle weblogic portal +1 moreThe cluster cookie parsing code in BEA WebLogic Server 7.0 through Service Pack 5 attempts to...5.0 Medium
- oracle weblogic portal, bea weblogic server +1 moreThe UserLogin control in BEA WebLogic Portal 8.1 through Service Pack 3 prints the password to...4.6 Medium
- bea weblogic serverBEA WebLogic Server and WebLogic Express 7.0 through Service Pack 5 does not log out users when...9.8 Critical
- bea weblogic server, oracle weblogic portal +1 moreBEA WebLogic Server and WebLogic Express 8.1 through Service Pack 3 and 7.0 through Service Pack...7.5 High
- bea weblogic server, oracle weblogic portal +1 moreBEA WebLogic Server and WebLogic Express 8.1 SP2 and SP3 allows users with the Monitor security...5.0 Medium
- gearbox software halo combat evolvedGearbox Software Halo: Combat Evolved 1.6 allows remote attackers to cause a denial of service ...5.0 Medium
- net-snmpfixproc in Net-snmp 5.x before 5.2.1-r1 creates temporary files insecurely, which allows local...10.0 High
- graphicsmagick, imagemagick +1 moreThe XWD Decoder in ImageMagick before 6.2.2.3, and GraphicsMagick before 1.1.6-r1, allows remote...5.0 Medium
- iron bars shell bars shellFormat string vulnerability in the logPrintBadfile function in delbadfiles.c Iron Bars SHell ...10.0 High
- electricmonk promsMultiple unknown vulnerabilities in PROMS 0.11 allow "non-authorized users" to (1) view or modify...7.5 High
- electricmonk promsPROMS 0.11 does not properly handle "certain combinations of rights," which gives more rights to...7.5 High
- electricmonk promsMultiple cross-site scripting (XSS) vulnerabilities in PROMS before 0.11 allow remote attackers...4.3 Medium
- electricmonk promsMultiple SQL injection vulnerabilities in PROMS before 0.11 allow remote attackers to execute...7.5 High
- metro marketing cookie cartCookie Cart stores the password file under the web document root with insufficient access control...5.0 Medium
- metro marketing cookie cartCookie Cart allows remote attackers to read the Order Notification list via the testmycgi and...5.0 Medium
- alwil avast antivirusUnknown vulnerability in ALWIL avast! antivirus 4 (4.6.6230) and earlier, when running on Windows...7.5 High
- ls games war timesBuffer overflow in LS Games War Times 1.03 and earlier allows remote attackers to cause a denial...5.0 Medium
- zyxel prestige 650r-31ZyXEL Prestige 650R-31 router running ZyNOS FW v3.40(KO.1) allows remote attackers to cause a...5.0 Medium
- ej3 topoTOPo 2.2 (2.2.178) stores data files in the data directory under the web document root with...5.0 Medium
- ej3 topoCross-site scripting (XSS) vulnerability in index.php for TOPo 2.2 (2.2.178) allows remote...4.3 Medium
- netwin surgemailCross-site scripting (XSS) vulnerability in NetWin SurgeMail 3.0c2 allows remote attackers to...4.3 Medium
- s9y serendipityMultiple cross-site scripting (XSS) vulnerabilities in Serendipity 0.8 allow remote attackers to...4.3 Medium
- sy9 serendipityUnknown vulnerability in Serendipity 0.8, when used with multiple authors, allows unprivileged...7.5 High
- clam anti-virus clamav, gibraltar firewall, squid +2 moreGibraltar Firewall 2.2 and earlier, when using the ClamAV update to 0.81 for Squid, uses a...7.5 High
- bluecoat reporterMultiple cross-site scripting (XSS) vulnerabilities in Blue Coat Reporter before 7.1.2 allow...4.3 Medium
- bluecoat reporterUnknown vulnerability in Blue Coat Reporter before 7.1.2 allows remote unauthenticated attackers...7.5 High
- bluecoat reportertemplates.admin.users.user_form_processing in Blue Coat Reporter before 7.1.2 allows...4.6 Medium
- gentoo linux webapp-configThe fn_show_postinst function in Gentoo webapp-config before 1.10-r14 allows local users to...4.6 Medium
- mailscannerUnknown vulnerability in MailScanner 4.41.3 and earlier, related to "incomplete reporting of...7.5 High
- gnu gdbgdb before 6.3 searches the current working directory to load the .gdbinit configuration file,...7.2 High
- gnu gdbInteger overflow in the Binary File Descriptor (BFD) library for gdb before 6.3, binutils,...4.6 Medium
- black cactus warrior kings battlesWarrior Kings: Battles 1.23 and earlier allows remote attackers to cause a denial of service ...5.0 Medium
- black cactus warrior kings, warrior kings battles +1 moreFormat string vulnerability in Warrior Kings: Battles 1.23 and earlier and Warrior Kings 1.3 and...7.5 High
- portailphpSQL injection vulnerability in PortailPHP 1.3 allows remote attackers to execute arbitrary SQL...7.5 High
- postnuke software foundation postnukeSQL injection vulnerability in pnadmin.php in the Xanthia module in PostNuke 0.760-RC3 allows...7.5 High
- postnuke software foundation postnukeDirectory traversal vulnerability in pnadminapi.php in the Xanthia module in PostNuke 0.760-RC3...4.0 Medium
- postnukePostNuke 0.750 and 0.760RC3 allows remote attackers to obtain sensitive information via a direct...5.0 Medium
- Show moreLoading…