Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2005
July

CVEs published in July 2005

272 vulnerabilities, 15 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

comersus open technologies cartMultiple SQL injection vulnerabilities in Comersus shopping cart allow remote attackers to...CVE-2005-21907.5 HighJuly 10, 2005
lantronix securelinxLantronix SecureLinx console server running firmware 2.0 and 3.0 stores /etc/ssh under the web...CVE-2005-21895.0 MediumJuly 10, 2005
mcafee intrushield security management systemMcAfee IntruShield Security Management System obtains the user ID from the URL, which allows...CVE-2005-21887.5 HighJuly 10, 2005
mcafee intrushield security management systemMcAfee IntruShield Security Management System allows remote authenticated users to access the ...CVE-2005-21874.6 MediumJuly 10, 2005
mcafee intrushield security management systemMultiple cross-site scripting (XSS) vulnerabilities in McAfee IntruShield Security Management...CVE-2005-21861.9 LowJuly 10, 2005
emc eroomeRoom does not set an expiration for Cookies, which allows remote attackers to capture cookies...CVE-2005-21857.5 HighJuly 10, 2005
emc eroomeRoom 6.x does not properly restrict files that can be attached, which allows remote attackers to...CVE-2005-21847.5 HighJuly 10, 2005
phpxmailclass.xmail.php in PhpXmail 0.7 through 1.1 does not properly handle large passwords, which...CVE-2005-21837.5 HighJuly 10, 2005
grandstream bt-100 firmwareGrandstream BudgeTone (BT) 100 Voice over IP (VoIP) phones do not properly check the Call-ID,...CVE-2005-21827.5 HighJuly 10, 2005
cisco ip phone 7940 firmware, ip phone 7960 firmware +1 moreCisco 7940/7960 Voice over IP (VoIP) phones do not properly check the Call-ID, branch, and tag...CVE-2005-21817.5 HighJuly 10, 2005
gnu gnatsgen-index in GNATS 4.0, 4.1.0, and possibly earlier versions, when installed setuid, does not...CVE-2005-21802.1 LowJuly 10, 2005
jawsPHP remote file inclusion vulnerability in BlogModel.php in Jaws 0.5.2 and earlier allows remote...CVE-2005-21795.0 MediumJuly 10, 2005
probe.cgiprobe.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the...CVE-2005-21787.5 HighJuly 10, 2005
net-snmpNet-SNMP 5.0.x before 5.0.10.2, 5.2.x before 5.2.1.2, and 5.1.3, when net-snmp is using stream...CVE-2005-2177Fix available5.0 MediumJuly 10, 2005
novell netmailNovell NetMail automatically processes HTML in an attachment without prompting the user to save...CVE-2005-2176Public exploit6.4 MediumJuly 9, 2005
ibm lotus notesThe web interface for Lotus Notes mail automatically processes HTML in an attachment without...CVE-2005-2175Public exploit5.0 MediumJuly 9, 2005
mozilla bugzillaBugzilla 2.17.x, 2.18 before 2.18.2, 2.19.x, and 2.20 before 2.20rc1 inserts a bug into the...CVE-2005-21742.6 LowJuly 8, 2005
mozilla bugzillaThe Flag::validate and Flag::modify functions in Bugzilla 2.17.1 to 2.18.1 and 2.19.1 to 2.19.3...CVE-2005-21735.0 MediumJuly 8, 2005
adobe acrobat readerThe control for Adobe Reader 5.0.9 and 5.0.10 on Linux, Solaris, HP-UX, and AIX creates temporary...CVE-2005-18412.1 LowJuly 7, 2005
kaf oseo quick and dirty phpsource printerDirectory traversal vulnerability in source.php in Quick & Dirty PHPSource Printer 1.1 and...CVE-2005-21695.0 MediumJuly 6, 2005
frozenplague.net plague news systemdelete.php in Plague News System 0.6 and earlier allows remote unauthenticated attackers to...CVE-2005-21685.0 MediumJuly 6, 2005
frozenplague.net plague news systemCross-site scripting (XSS) vulnerability in index.php in Plague News System 0.6 and earlier...CVE-2005-21674.3 MediumJuly 6, 2005
frozenplague.net plague news systemSQL injection vulnerability in index.php in Plague News System 0.6 and earlier allows remote...CVE-2005-21665.0 MediumJuly 6, 2005
globalnotescriptread.cgi in GlobalNoteScript allows remote attackers to execute arbitrary commands via shell...CVE-2005-21657.5 HighJuly 6, 2005
covide groupware-crm covideSQL injection vulnerability in Covide Groupware-CRM allows remote attackers to execute arbitrary...CVE-2005-21647.5 HighJuly 6, 2005
autoindex php scriptCross-site scripting (XSS) vulnerability in index.php in AutoIndex PHP Script 1.5.2 allows remote...CVE-2005-2163Public exploit4.3 MediumJuly 6, 2005
levcgi.com myguestbookPHP remote file inclusion vulnerability in form.inc.php3 in MyGuestbook 0.6.1 allows remote...CVE-2005-2162Public exploit5.0 MediumJuly 6, 2005
phpbb group phpbbCross-site scripting (XSS) vulnerability in phpBB 2.0.16 allows remote attackers to inject...CVE-2005-2161Fix available4.3 MediumJuly 6, 2005
ipswitch imailIMail stores usernames and passwords in cleartext in a cookie, which allows remote attackers to...CVE-2005-21607.5 HighJuly 6, 2005
planetdns planetfileservermshftp.dll in PlanetDNS PlanetFileServer 2.0.1.3 allows remote attackers to cause a denial of...CVE-2005-21595.0 MediumJuly 6, 2005
jboss jbpmA regression error in the embedded HSQLDB in JBoss jBPM 2.0 allows remote attackers to execute...CVE-2005-21587.5 HighJuly 6, 2005
nabocorp nabopollPHP remote file inclusion vulnerability in survey.inc.php for nabopoll 1.2 allows remote...CVE-2005-2157Public exploit5.0 MediumJuly 6, 2005
phpnewsSQL injection vulnerability in news.php in PHPNews 1.2.5 allows remote attackers to execute...CVE-2005-21567.5 HighJuly 6, 2005
easyphpcalendarPHP remote file inclusion vulnerability in EasyPHPCalendar 6.1.5 and earlier allows remote...CVE-2005-2155Public exploit7.5 HighJuly 6, 2005
osticket stsPHP local file inclusion vulnerability in (1) view.php and (2) open.php in osTicket 1.3.1 beta...CVE-2005-2154Public exploit7.5 HighJuly 6, 2005
osticket stsSQL injection vulnerability in class.ticket.php in osTicket 1.3.1 beta and earlier allows remote...CVE-2005-21537.5 HighJuly 6, 2005
geeklogSQL injection vulnerability in Geeklog before 1.3.11 allows remote attackers to execute arbitrary...CVE-2005-21527.5 HighJuly 6, 2005
double precision incorporated courier mail serverspf.c in Courier Mail Server does not properly handle DNS failures when looking up Sender Policy...CVE-2005-2151Fix available5.0 MediumJuly 6, 2005
the cacti group cacticonfig.php in Cacti 0.8.6e and earlier allows remote attackers to set the no_http_headers switch,...CVE-2005-2149Fix available10.0 HighJuly 6, 2005
the cacti group cactiCacti 0.8.6e and earlier does not perform proper input validation to protect against common...CVE-2005-2148Fix available7.5 HighJuly 6, 2005
ekg project ekg, debian linux +1 morelinki.py in ekg 2005-06-05 and earlier allows local users to overwrite or create arbitrary files...CVE-2005-19165.5 MediumJuly 6, 2005
edgewall software tracTrac before 0.8.4 allows remote attackers to read or upload arbitrary files via a full pathname...CVE-2005-2147Fix available6.4 MediumJuly 6, 2005
zlib, siemens cadra +1 morezlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a...CVE-2005-2096Fix available7.5 HighJuly 6, 2005
ssh tectia serverSSH Tectia Server 4.3.1 and earlier, and SSH Secure Shell for Windows Servers, uses insecure...CVE-2005-21464.6 MediumJuly 5, 2005
prevx pro 2005The kernel driver in Prevx Pro 2005 1.0 does not verify the source of certain messages, which...CVE-2005-21454.6 MediumJuly 5, 2005
prevx pro 2005Prevx Pro 2005 1.0 allows local users to bypass file protection and modify files by using...CVE-2005-21442.1 LowJuly 5, 2005
microsoft frontpageMicrosoft Front Page allows attackers to cause a denial of service (crash) via a crafted style...CVE-2005-21435.0 MediumJuly 5, 2005
kmint21 software golden ftp serverDirectory traversal vulnerability in Golden FTP Server 2.60 allows remote authenticated attackers...CVE-2005-21422.1 LowJuly 5, 2005
jollybox.de tcp chatTCP Chat 1.0 allows remote attackers to cause a denial of service (crash) via a long string to...CVE-2005-2141Public exploit5.0 MediumJuly 5, 2005
fsboardDirectory traversal vulnerability in default.asp for FSboard 2.0 allows remote attackers to read...CVE-2005-2140Public exploit5.0 MediumJuly 5, 2005
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open