# CVEs published 2005-04-24

18 CVEs were published on April 24, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-0135](https://cve.now/CVE-2005-0135.md): The unw\_unwind\_to\_user function in unwind.c on Itanium (ia64) architectures in Linux kernel 2.6 allows local users to cause a denial of… (no CVSS)
- [CVE-2005-0137](https://cve.now/CVE-2005-0137.md): Linux kernel 2.6 on Itanium (ia64) architectures allows local users to cause a denial of service via a "missing Itanium syscall table… (no CVSS)
- [CVE-2005-0754](https://cve.now/CVE-2005-0754.md): Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote attackers to execute… (no CVSS)
- [CVE-2005-1231](https://cve.now/CVE-2005-1231.md): Cross-site scripting (XSS) vulnerability in the NewTerm function in GlossaryModel.php in JAWS 0.4 allows remote attackers to inject… (no CVSS)
- [CVE-2005-1232](https://cve.now/CVE-2005-1232.md): Buffer overflow in Sun Java System Web Proxy Server (aka Sun ONE Proxy Server) 3.6 SP6 allows remote attackers to execute arbitrary code… (no CVSS)
- [CVE-2005-1233](https://cve.now/CVE-2005-1233.md): Cross-site scripting (XSS) vulnerability in index.php in PHP Labs proFile allows remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2005-1234](https://cve.now/CVE-2005-1234.md): Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via the (1) u parameter… (no CVSS)
- [CVE-2005-1235](https://cve.now/CVE-2005-1235.md): auction\_my\_auctions.php in phpbb-Auction 1.2m and earlier allows remote attackers to obtain sensitive information via an invalid mode… (no CVSS)
- [CVE-2005-1236](https://cve.now/CVE-2005-1236.md): Multiple SQL injection vulnerabilities in DUware DUportal 3.1.2 and 3.1.2 SQL allow remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2005-1237](https://cve.now/CVE-2005-1237.md): SQL injection vulnerability in news.php in FlexPHPNews 0.0.3 allows remote attackers to execute arbitrary SQL commands via the newsid… (no CVSS)
- [CVE-2005-1238](https://cve.now/CVE-2005-1238.md): By design, the built-in FTP server for iSeries AS/400 systems does not support a restricted document root, which allows attackers to read… (no CVSS)
- [CVE-2005-1239](https://cve.now/CVE-2005-1239.md): Directory traversal vulnerability in the third party tool from Raz-Lee, as used to secure the iSeries AS/400 FTP server, allows remote… (no CVSS)
- [CVE-2005-1240](https://cve.now/CVE-2005-1240.md): Directory traversal vulnerability in the third party tool from Castlehill, as used to secure the iSeries AS/400 FTP server, allows remote… (no CVSS)
- [CVE-2005-1241](https://cve.now/CVE-2005-1241.md): Directory traversal vulnerability in the third party tool from Powertech, as used to secure the iSeries AS/400 FTP server, allows remote… (no CVSS)
- [CVE-2005-1242](https://cve.now/CVE-2005-1242.md): Directory traversal vulnerability in the third party tool from Bsafe, as used to secure the iSeries AS/400 FTP server, allows remote… (no CVSS)
- [CVE-2005-1243](https://cve.now/CVE-2005-1243.md): Directory traversal vulnerability in the third party tool from SafeStone, as used to secure the iSeries AS/400 FTP server, allows remote… (no CVSS)
- [CVE-2005-1244](https://cve.now/CVE-2005-1244.md): Directory traversal vulnerability in the third party tool from NetIQ, as used to secure the iSeries AS/400 FTP server, allows remote… (no CVSS)
- [CVE-2005-1245](https://cve.now/CVE-2005-1245.md): Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.2, when using HTML Tidy ($wgUseTidy), allows remote attackers to inject… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2005-04-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.