CVE-2005-0322

CVE-2005-0322 affects MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 and Mail Server 7.6.4r with Icewarp Mail Server 5.3.2. The issue is weak encryption in the configuration and data files (users.cfg, settings.cfg, users.dat, user.dat), which allows local users to extract stored passwords. T...

CVE-2005-0323

Cross-site scripting XSS vulnerability in Infinite Mobile Delivery Webmail 2.6 allows remote attackers to inject arbitrary web script or HTML via the URL...

CVE-2005-0283

Directory traversal vulnerability in index.php in QwikiWiki allows remote attackers to read arbitrary files via a .. dot dot and a %00 at the end of the filename in the page parameter...

CVE-2005-0295

npptnt2.sys in nProtect Gameguard provides unrestricted I/O to any process that calls it, which allows local users to gain privileges...

CVE-2005-0301

comersusbackofficeinstall10.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to bypass authentication and gain privileges via a direct request to the program...

CVE-2005-0325

CVE-2005-0325 affects Xpand Rally 1.0.0.0. The vulnerability allows remote attackers or remote game servers to trigger a denial-of-service (application crash) by sending a packet with large values not properly handled in certain malloc or memcpy operations. Global impact is a partial availability...

CVE-2005-0287

Bottomline Webseries Payment Application allows remote attackers to read arbitrary files on the network via a report template with modified ReportPath or ReportName values...

CVE-2005-0266

Cross-site scripting XSS vulnerability in index.php in SugarCRM 1.X allows remote attackers to inject arbitrary web script or HTML via the 1 returnmodule, 2 returnaction, 3 name, 4 module, or 5 record parameter...

CVE-2005-0278

The CVE-2005-0278 entry concerns the FTP service of 3Com 3CDaemon/3CServer (2.0, revision 10). A remote attacker can trigger an information disclosure by issuing a CD command containing an MS-DOS device name, causing an error message that reveals the installation path. Affected component is the F...

CVE-2005-0293

Directory traversal vulnerability in minis.php in Minis 0.2.1 allows remote attackers to read arbitrary files via a .. dot dot in the month parameter...

CVE-2005-0345

viewthread.php in php-fusion 4.x does not check the 1 forumid or 2 forumcat parameters, which allows remote attackers to view protected forums via the threadid parameter...

CVE-2005-0263

Buffer overflow in netpmon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -O argument...

CVE-2005-0273

CVE-2005-0273 : The OpenVAS/NVD records describe SQL Injection vulnerabilities in PhotoPost PHP’s showgallery.php that allow remote attackers to execute arbitrary SQL commands via the (1) cat or (2) ppuser parameters. Affected product: PhotoPost PHP Pro (and PhotoPost up to version 4.86 per the C...

CVE-2005-0262

The CVE-2005-0262 entry describes a buffer overflow in the AIX component ipl_varyon affecting AIX 5.1, 5.2, and 5.3. The vulnerability allows local users to execute arbitrary code by supplying a long -d argument. This is a local-execution vulnerability with complete impact on confidentiality, int...

CVE-2005-0279

Soldner Secret Wars 30830 and earlier does not properly handle the "message too long" socket error, which allows remote attackers to cause a denial of service socket termination via a long UDP packet...

CVE-2005-0292

PHP Gift Registry (phpGiftReg) 1.4.0 (and possibly earlier versions before 1.5.0b1) contains multiple SQL injection vulnerabilities in index.php. The issues allow remote attackers to inject SQL via the parameters messageid, shopper, shopfor, or itemid, potentially enabling arbitrary SQL command e...

CVE-2005-0339

CVE-2005-0339 describes a buffer overflow in Foxmail 2.0 that can be triggered by a long MAIL FROM command over the network. The consequence is a denial of service and the possibility of arbitrary code execution by a remote attacker. The provided documents do not specify impacted versions beyond ...

CVE-2005-0300

CVE-2005-0300 is a directory traversal vulnerability in JSBoard’s session.php. Affected versions are 2.0.9 and earlier; remote attackers could read arbitrary files by supplying a .. in the table parameter. The connected Nessus entry suggests a fix in JSBoard 2.0.10 (i.e., upgrade to 2.0.10 or lat...

CVE-2005-0299

Directory traversal vulnerability in GForge 3.3 and earlier allows remote attackers to list arbitrary directories via a .. dot dot in the 1 dir parameter to controller.php or 2 dirname parameter to controlleroo.php...

CVE-2005-0341

CVE-2005-0341 affects Apple Safari 1.2.4. The vulnerability arises because Safari does not obey the Content-Type HTTP header, causing text to be rendered as HTML and enabling remote attackers to inject arbitrary script or HTML (XSS). No exploit specifics are provided in the connected documents. A...