# CVEs published 2005-02-17

16 CVEs were published on February 17, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2004-1489](https://cve.now/CVE-2004-1489.md): Opera 7.54 and earlier does not properly limit an applet's access to internal Java packages from Sun, which allows remote attackers to… (no CVSS)
- [CVE-2004-1490](https://cve.now/CVE-2004-1490.md): Opera 7.54 and earlier allows remote attackers to spoof file types in the download dialog via dots and non-breaking spaces (ASCII… (no CVSS)
- [CVE-2004-1491](https://cve.now/CVE-2004-1491.md): Opera 7.54 and earlier uses kfmclient exec to handle unknown MIME types, which allows remote attackers to execute arbitrary code via a… (no CVSS)
- [CVE-2005-0251](https://cve.now/CVE-2005-0251.md): Cross-site scripting (XSS) vulnerability in bibindex.php for BibORB 1.3.2, and possibly earlier versions, allows remote attackers to… (no CVSS)
- [CVE-2005-0252](https://cve.now/CVE-2005-0252.md): SQL injection vulnerability in BibORB 1.3.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2005-0253](https://cve.now/CVE-2005-0253.md): Directory traversal vulnerability in index.php for BibORB 1.3.2, and possibly earlier versions, allows remote attackers to delete… (no CVSS)
- [CVE-2005-0254](https://cve.now/CVE-2005-0254.md): BibORB 1.3.2, and possibly earlier versions, does not properly enforce a restriction for uploading only PDF and PS files, which allows… (CVSS 3.7)
- [CVE-2005-0372](https://cve.now/CVE-2005-0372.md): Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP servers to read arbitrary files via .. (no CVSS)
- [CVE-2005-0456](https://cve.now/CVE-2005-0456.md): Opera 7.54 and earlier does not properly validate base64 encoded binary data in a data: (RFC 2397) URL, which causes the URL to be… (no CVSS)
- [CVE-2005-0457](https://cve.now/CVE-2005-0457.md): Opera 7.54 and earlier on Gentoo Linux uses an insecure path for plugins, which could allow local users to gain privileges by inserting… (no CVSS)
- [CVE-2005-0458](https://cve.now/CVE-2005-0458.md): Cross-site scripting (XSS) vulnerability in contact\_us.php in osCommerce 2.2-MS2 allows remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2005-0459](https://cve.now/CVE-2005-0459.md): phpMyAdmin 2.6.2-dev, and possibly earlier versions, allows remote attackers to determine the full path of the web root via a direct… (no CVSS)
- [CVE-2005-0460](https://cve.now/CVE-2005-0460.md): index.php in MercuryBoard 1.0.x and 1.1.x allows remote attackers to obtain sensitive information by setting the debug parameter. (no CVSS)
- [CVE-2005-0461](https://cve.now/CVE-2005-0461.md): Unknown vulnerability in NewsBruiser 2.x before 2.6.1 allows remote attackers to "take actions on comments." (no CVSS)
- [CVE-2005-0462](https://cve.now/CVE-2005-0462.md): Cross-site scripting (XSS) vulnerability in MercuryBoard 1.0.x and 1.1.x allows remote attackers to inject arbitrary HTML and web script… (no CVSS)
- [CVE-2005-0463](https://cve.now/CVE-2005-0463.md): Unknown "major security flaws" in Ulog-php before 1.0, related to input validation, have unknown impact and attack vectors, probably… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2005-02-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.