# CVEs published 2005-03-22 23 CVEs were published on March 22, 2005: 0 critical, 0 high. Days are UTC. - [CVE-2001-1424](https://cve.now/CVE-2001-1424.md): Alcatel Speed Touch ADSL modem running firmware KHDSAA.108, KHDSAA.132, KHDSBA.133, and KHDSAA.134 has a blank default password, which… (no CVSS) - [CVE-2001-1425](https://cve.now/CVE-2001-1425.md): The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through… (no CVSS) - [CVE-2001-1426](https://cve.now/CVE-2001-1426.md): Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 has a TFTP server running without a password, which… (no CVSS) - [CVE-2001-1427](https://cve.now/CVE-2001-1427.md): Unknown vulnerability in ColdFusion Server 2.0 through 4.5.1 SP2 allows remote attackers to overwrite templates with zero byte files via… (no CVSS) - [CVE-2005-0712](https://cve.now/CVE-2005-0712.md): Mac OS X before 10.3.8 users world-writable permissions for certain directories, which may allow local users to gain privileges, possibly… (no CVSS) - [CVE-2005-0713](https://cve.now/CVE-2005-0713.md): The Bluetooth Setup Assistant for Mac OS X before 10.3.8 can be launched without a keyboard or Bluetooth device, which allows local users… (no CVSS) - [CVE-2005-0715](https://cve.now/CVE-2005-0715.md): AFP Server in Mac OS X before 10.3.8 uses insecure permissions for "Drop Boxes," which allows local users to read the contents of a Drop… (no CVSS) - [CVE-2005-0716](https://cve.now/CVE-2005-0716.md): Stack-based buffer overflow in the Core Foundation Library in Mac OS X 10.3.5 and 10.3.6, and possibly earlier versions, allows local… (no CVSS) - [CVE-2005-0764](https://cve.now/CVE-2005-0764.md): Buffer overflow in command.C for rxvt-unicode before 5.3 allows remote attackers to execute arbitrary code via a crafted file containing… (no CVSS) - [CVE-2005-0825](https://cve.now/CVE-2005-0825.md): Buffer overflow in LTris before 1.0.10 allows local users to execute arbitrary code via a crafted highscores file. (no CVSS) - [CVE-2005-0826](https://cve.now/CVE-2005-0826.md): OllyDbg 1.10 and earlier allows remote attackers to cause a denial of service (application crash) via a dynamic link library (DLL) with a… (no CVSS) - [CVE-2005-0827](https://cve.now/CVE-2005-0827.md): Viewcat.php in (1) RUNCMS 1.1A, (2) Ciamos 0.9.2 RC1, e-Xoops 1.05 Rev3, and possibly other products based on e-Xoops (exoops), allow… (no CVSS) - [CVE-2005-0828](https://cve.now/CVE-2005-0828.md): highlight.php in (1) RUNCMS 1.1A, (2) CIAMOS 0.9.2 RC1, (3) e-Xoops 1.05 Rev3, and possibly other products based on e-Xoops (exoops)… (no CVSS) - [CVE-2005-0829](https://cve.now/CVE-2005-0829.md): Cross-site scripting (XSS) vulnerability in setuser.php of the Digitanium addon to PHP-Fusion 5.01 allows remote attackers to inject… (no CVSS) - [CVE-2005-0830](https://cve.now/CVE-2005-0830.md): Multiple buffer overflows in Xzabite DYNDNSUpdate 0.6.15 and earlier, including the ipcheck function in dyndnsupdate.c, allow remote… (no CVSS) - [CVE-2005-0831](https://cve.now/CVE-2005-0831.md): PHP-Post allows remote attackers to spoof the names of other users by registering with a username containing hex-encoded characters. (no CVSS) - [CVE-2005-0832](https://cve.now/CVE-2005-0832.md): Cross-site scripting (XSS) vulnerability in PHP-Post before 0.33 allows remote attackers to inject arbitrary web script or HTML via… (no CVSS) - [CVE-2005-0833](https://cve.now/CVE-2005-0833.md): Belkin 54G (F5D7130) wireless router allows remote attackers to access restricted resources by sniffing URIs from UPNP datagrams, then… (no CVSS) - [CVE-2005-0834](https://cve.now/CVE-2005-0834.md): Belkin 54G (F5D7130) wireless router enables SNMP by default in a manner that allows remote attackers to obtain sensitive information. (no CVSS) - [CVE-2005-0835](https://cve.now/CVE-2005-0835.md): The SNMP service in the Belkin 54G (F5D7130) wireless router allows remote attackers to cause a denial of service via unknown vectors. (no CVSS) - [CVE-2005-0836](https://cve.now/CVE-2005-0836.md): Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2\_06 allows untrusted applications to gain privileges via the… (no CVSS) - [CVE-2005-0837](https://cve.now/CVE-2005-0837.md): IceCast 2.20 allows remote attackers to bypass the XSL parser and obtain the source for XSL files via a request for a .xsl file with a… (no CVSS) - [CVE-2005-0838](https://cve.now/CVE-2005-0838.md): Multiple buffer overflows in the XSL parser for IceCast 2.20 may allow attackers to cause a denial of service and possibly execute… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2005-03-22 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.