# CVEs published 2005-04-12

44 CVEs were published on April 12, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-0390](https://cve.now/CVE-2005-0390.md): Buffer overflow in the HTTP redirection capability in conn.c for Axel before 1.0b may allow remote attackers to execute arbitrary code. (no CVSS)
- [CVE-2005-0941](https://cve.now/CVE-2005-0941.md): The StgCompObjStream::Load function in OpenOffice.org OpenOffice 1.1.4 and earlier allocates memory based on 16 bit length values, but… (no CVSS)
- [CVE-2005-1018](https://cve.now/CVE-2005-1018.md): Buffer overflow in the UniversalAgent for Computer Associates (CA) BrightStor ARCserve Backup allows remote authenticated users to cause a… (no CVSS)
- [CVE-2005-1041](https://cve.now/CVE-2005-1041.md): The fib\_seq\_start function in fib\_hash.c in Linux kernel allows local users to cause a denial of service (system crash) via /proc/net/route. (no CVSS)
- [CVE-2005-1042](https://cve.now/CVE-2005-1042.md): Integer overflow in the exif\_process\_IFD\_TAG function in exif.c in PHP before 4.3.11 may allow remote attackers to execute arbitrary code… (no CVSS)
- [CVE-2005-1043](https://cve.now/CVE-2005-1043.md): exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory consumption and crash) via an EXIF header with a… (no CVSS)
- [CVE-2005-1045](https://cve.now/CVE-2005-1045.md): OpenText FirstClass 8.0 client does not properly sanitize strings before passing them to the Windows ShellExecute API, which allows remote… (no CVSS)
- [CVE-2005-1046](https://cve.now/CVE-2005-1046.md): Buffer overflow in the kimgio library for KDE 3.4.0 allows remote attackers to execute arbitrary code via a crafted PCX image file. (no CVSS)
- [CVE-2005-1047](https://cve.now/CVE-2005-1047.md): Meilad File upload script (up.php) mod for phpBB 2.0.x does not properly limit the types of files that can be uploaded, which allows… (no CVSS)
- [CVE-2005-1048](https://cve.now/CVE-2005-1048.md): SQL injection vulnerability in modules.php in PostNuke 0.760 RC3 allows remote attackers to execute arbitrary SQL statements via the sid… (no CVSS)
- [CVE-2005-1049](https://cve.now/CVE-2005-1049.md): Multiple cross-site scripting vulnerabilities in PostNuke 0.760-RC3 allow remote attackers to inject arbitrary web script or HTML via the… (no CVSS)
- [CVE-2005-1050](https://cve.now/CVE-2005-1050.md): The modload op in the Reviews module for PostNuke 0.760-RC3 allows remote attackers to obtain sensitive information via an invalid id… (no CVSS)
- [CVE-2005-1051](https://cve.now/CVE-2005-1051.md): SQL injection vulnerability in profile.php in PunBB 1.2.4 allows remote authenticated users to execute arbitrary SQL commands via the id… (no CVSS)
- [CVE-2005-1052](https://cve.now/CVE-2005-1052.md): Microsoft Outlook 2003 and Outlook Web Access (OWA) 2003 do not properly display comma separated addresses in the From field in an e-mail… (no CVSS)
- [CVE-2005-1053](https://cve.now/CVE-2005-1053.md): Multiple cross-site scripting (XSS) vulnerabilities in orderwiz.php in ModernBill 4.3.0 and earlier allow remote attackers to inject… (no CVSS)
- [CVE-2005-1054](https://cve.now/CVE-2005-1054.md): PHP remote file inclusion vulnerability in news.php in ModernBill 4.3.0 and earlier allows remote attackers to execute arbitrary PHP code… (no CVSS)
- [CVE-2005-1055](https://cve.now/CVE-2005-1055.md): TowerBlog 0.6 and earlier stores the login data file under the web root, which allows remote attackers to obtain the MD5 checksums of the… (no CVSS)
- [CVE-2005-1056](https://cve.now/CVE-2005-1056.md): Unknown vulnerability in HP OpenView Network Node Manager (NMM) 6.2 through 6.4, and 7.01 through 7.50, allows remote attackers to cause a… (no CVSS)
- [CVE-2005-1057](https://cve.now/CVE-2005-1057.md): Cisco IOS 12.2T, 12.3 and 12.3T, when using Easy VPN Server XAUTH version 6 authentication, allows remote attackers to bypass… (no CVSS)
- [CVE-2005-1058](https://cve.now/CVE-2005-1058.md): Cisco IOS 12.2T, 12.3 and 12.3T, when processing an ISAKMP profile that specifies XAUTH authentication after Phase 1 negotiation, may not… (no CVSS)
- [CVE-2005-1059](https://cve.now/CVE-2005-1059.md): Linksys WET11 1.5.4 allows remote attackers to change the password without providing the original password via the data parameter to… (no CVSS)
- [CVE-2005-1060](https://cve.now/CVE-2005-1060.md): Unknown vulnerability in the TCP/IP functionality (TCPIP.NLM) in Novell Netware 6.x allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2005-1064](https://cve.now/CVE-2005-1064.md): The copy\_symlink function in rsnapshot 1.2.0 and 1.1.x before 1.1.7 changes the ownership of files that a symlink points to rather than… (no CVSS)
- [CVE-2005-1065](https://cve.now/CVE-2005-1065.md): tetex in Novell Linux Desktop 9 allows local users to determine the existence of arbitrary files via a symlink attack in the… (no CVSS)
- [CVE-2005-1066](https://cve.now/CVE-2005-1066.md): Race condition in rpdump in Pine 4.62 and earlier allows local users to overwrite arbitrary files via a symlink attack. (no CVSS)
- [CVE-2005-1067](https://cve.now/CVE-2005-1067.md): Vulnerability in Access\_user Class before 1.75 allows local users to gain access as other users via the password "new". (no CVSS)
- [CVE-2005-1068](https://cve.now/CVE-2005-1068.md): Cross-site scripting (XSS) vulnerability in sCssBoard 1.11 and earlier allows remote attackers to execute arbitrary Javascript via \[url\]… (no CVSS)
- [CVE-2005-1069](https://cve.now/CVE-2005-1069.md): Unknown vulnerability in sCssBoard 1.11 and earlier has unknown impact, related to "an exploit on the Profile page." (no CVSS)
- [CVE-2005-1070](https://cve.now/CVE-2005-1070.md): SQL injection vulnerability in index.php in Invision Power Board 1.3.1 Final and earlier allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2005-1071](https://cve.now/CVE-2005-1071.md): SQL injection vulnerability in banner.inc.php in JPortal Web Portal 2.3.1 allows remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2005-1072](https://cve.now/CVE-2005-1072.md): Cross-site scripting (XSS) vulnerability in PunBB before 1.2.5 allows remote attackers to inject arbitrary web script or HTML. (no CVSS)
- [CVE-2005-1073](https://cve.now/CVE-2005-1073.md): Directory traversal vulnerability in index.php for RadScripts RadBids Gold 2 allows remote attackers to read arbitrary files via the read… (no CVSS)
- [CVE-2005-1074](https://cve.now/CVE-2005-1074.md): SQL injection vulnerability in index.php for RadScripts RadBids Gold 2 allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2005-1075](https://cve.now/CVE-2005-1075.md): Multiple cross-site scripting (XSS) vulnerabilities in RadScripts RadBids Gold 2 allow remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2005-1076](https://cve.now/CVE-2005-1076.md): Cross-site scripting (XSS) vulnerability in the discussion board functionality for WebCT Campus Edition 4.1 allows remote attackers to… (no CVSS)
- [CVE-2005-1077](https://cve.now/CVE-2005-1077.md): Multiple cross-site scripting (XSS) vulnerabilities in XAMPP 1.4.x allow remote attackers to inject arbitrary web script or HTML via (1)… (no CVSS)
- [CVE-2005-1078](https://cve.now/CVE-2005-1078.md): XAMPP 1.4.x has multiple default or null passwords, which allows attackers to gain privileges. (no CVSS)
- [CVE-2005-1079](https://cve.now/CVE-2005-1079.md): SQL injection vulnerability in index.php for zOOm Media Gallery 2.1.2 allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2005-1080](https://cve.now/CVE-2005-1080.md): Directory traversal vulnerability in the Java Archive Tool (Jar) utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows remote attackers… (no CVSS)
- [CVE-2005-1081](https://cve.now/CVE-2005-1081.md): Cross-site scripting (XSS) vulnerability in view.php in AzDGDatingPlatinum 1.1.0 allows remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2005-1082](https://cve.now/CVE-2005-1082.md): Multiple SQL injection vulnerabilities in AzDGDatingPlatinum 1.1.0 allows remote attackers to execute arbitrary SQL commands via (1) the… (no CVSS)
- [CVE-2005-1083](https://cve.now/CVE-2005-1083.md): index.php in aeDating 3.2 allows remote attackers to include arbitrary files via the skin parameter. (no CVSS)
- [CVE-2005-1084](https://cve.now/CVE-2005-1084.md): SQL injection vulnerability in sdating.php in aeDating 3.2 allows remote attackers to execute arbitrary SQL commands files via the event… (no CVSS)
- [CVE-2005-1085](https://cve.now/CVE-2005-1085.md): Cross-site scripting (XSS) vulnerability in the control panel in aeDating 3.2 allows remote attackers to inject arbitrary web script or… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2005-04-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.