# CVEs published 2005-05-24

46 CVEs were published on May 24, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-1692](https://cve.now/CVE-2005-1692.md): Format string vulnerability in gxine 0.4.1 through 0.4.4, and other versions down to 0.3, allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2005-1693](https://cve.now/CVE-2005-1693.md): Integer overflow in Computer Associates Vet Antivirus library, as used by CA InoculateIT 6.0, eTrust Antivirus r6.0 through 7.1, eTrust… (no CVSS)
- [CVE-2005-1694](https://cve.now/CVE-2005-1694.md): Multiple SQL injection vulnerabilities in Xanthia.php in the Xanthia module in PostNuke 0.750 allow remote attackers to execute arbitrary… (no CVSS)
- [CVE-2005-1695](https://cve.now/CVE-2005-1695.md): Multiple cross-site scripting (XSS) vulnerabilities in the RSS module in PostNuke 0.750 and 0.760RC2 and RC3 allow remote attackers to… (no CVSS)
- [CVE-2005-1696](https://cve.now/CVE-2005-1696.md): Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.750 and 0.760RC3 allow remote attackers to inject arbitrary web script… (no CVSS)
- [CVE-2005-1697](https://cve.now/CVE-2005-1697.md): The RSS module in PostNuke 0.750 and 0.760RC2 and RC3 allows remote attackers to obtain sensitive information via a direct request to… (no CVSS)
- [CVE-2005-1698](https://cve.now/CVE-2005-1698.md): PostNuke 0.750 and 0.760RC3 allows remote attackers to obtain sensitive information via a direct request to (1) theme.php or (2)… (no CVSS)
- [CVE-2005-1699](https://cve.now/CVE-2005-1699.md): Directory traversal vulnerability in pnadminapi.php in the Xanthia module in PostNuke 0.760-RC3 allows remote administrators to read… (no CVSS)
- [CVE-2005-1700](https://cve.now/CVE-2005-1700.md): SQL injection vulnerability in pnadmin.php in the Xanthia module in PostNuke 0.760-RC3 allows remote administrators to execute arbitrary… (no CVSS)
- [CVE-2005-1701](https://cve.now/CVE-2005-1701.md): SQL injection vulnerability in PortailPHP 1.3 allows remote attackers to execute arbitrary SQL commands via the id parameter to the (1)… (no CVSS)
- [CVE-2005-1702](https://cve.now/CVE-2005-1702.md): Format string vulnerability in Warrior Kings: Battles 1.23 and earlier and Warrior Kings 1.3 and earlier allows remote attackers to… (no CVSS)
- [CVE-2005-1703](https://cve.now/CVE-2005-1703.md): Warrior Kings: Battles 1.23 and earlier allows remote attackers to cause a denial of service (server crash) via a partial join packet that… (no CVSS)
- [CVE-2005-1704](https://cve.now/CVE-2005-1704.md): Integer overflow in the Binary File Descriptor (BFD) library for gdb before 6.3, binutils, elfutils, and possibly other packages, allows… (no CVSS)
- [CVE-2005-1705](https://cve.now/CVE-2005-1705.md): gdb before 6.3 searches the current working directory to load the .gdbinit configuration file, which allows local users to execute… (no CVSS)
- [CVE-2005-1706](https://cve.now/CVE-2005-1706.md): Unknown vulnerability in MailScanner 4.41.3 and earlier, related to "incomplete reporting of viruses in zip files," allows remote… (no CVSS)
- [CVE-2005-1707](https://cve.now/CVE-2005-1707.md): The fn\_show\_postinst function in Gentoo webapp-config before 1.10-r14 allows local users to overwrite arbitrary files via a symlink attack… (no CVSS)
- [CVE-2005-1708](https://cve.now/CVE-2005-1708.md): templates.admin.users.user\_form\_processing in Blue Coat Reporter before 7.1.2 allows authenticated users to gain administrator privileges… (no CVSS)
- [CVE-2005-1709](https://cve.now/CVE-2005-1709.md): Unknown vulnerability in Blue Coat Reporter before 7.1.2 allows remote unauthenticated attackers to add a license. (no CVSS)
- [CVE-2005-1710](https://cve.now/CVE-2005-1710.md): Multiple cross-site scripting (XSS) vulnerabilities in Blue Coat Reporter before 7.1.2 allow remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2005-1711](https://cve.now/CVE-2005-1711.md): Gibraltar Firewall 2.2 and earlier, when using the ClamAV update to 0.81 for Squid, uses a defunct ClamAV method to scan memory for… (no CVSS)
- [CVE-2005-1712](https://cve.now/CVE-2005-1712.md): Unknown vulnerability in Serendipity 0.8, when used with multiple authors, allows unprivileged authors to upload arbitrary media files. (no CVSS)
- [CVE-2005-1713](https://cve.now/CVE-2005-1713.md): Multiple cross-site scripting (XSS) vulnerabilities in Serendipity 0.8 allow remote attackers to inject arbitrary web script or HTML via… (no CVSS)
- [CVE-2005-1714](https://cve.now/CVE-2005-1714.md): Cross-site scripting (XSS) vulnerability in NetWin SurgeMail 3.0c2 allows remote attackers to inject arbitrary web script or HTML via… (no CVSS)
- [CVE-2005-1715](https://cve.now/CVE-2005-1715.md): Cross-site scripting (XSS) vulnerability in index.php for TOPo 2.2 (2.2.178) allows remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2005-1716](https://cve.now/CVE-2005-1716.md): TOPo 2.2 (2.2.178) stores data files in the data directory under the web document root with insufficient access control, which allows… (no CVSS)
- [CVE-2005-1717](https://cve.now/CVE-2005-1717.md): ZyXEL Prestige 650R-31 router running ZyNOS FW v3.40(KO.1) allows remote attackers to cause a denial of service (CPU consumption and… (no CVSS)
- [CVE-2005-1718](https://cve.now/CVE-2005-1718.md): Buffer overflow in LS Games War Times 1.03 and earlier allows remote attackers to cause a denial of service (server crash) via a long… (no CVSS)
- [CVE-2005-1719](https://cve.now/CVE-2005-1719.md): Unknown vulnerability in ALWIL avast! antivirus 4 (4.6.6230) and earlier, when running on Windows NT 4.0, does not properly detect certain… (no CVSS)
- [CVE-2005-1732](https://cve.now/CVE-2005-1732.md): Cookie Cart allows remote attackers to read the Order Notification list via the testmycgi and path parameters to testmy.cgi. (no CVSS)
- [CVE-2005-1733](https://cve.now/CVE-2005-1733.md): Cookie Cart stores the password file under the web document root with insufficient access control, which allows remote attackers to obtain… (no CVSS)
- [CVE-2005-1734](https://cve.now/CVE-2005-1734.md): Multiple SQL injection vulnerabilities in PROMS before 0.11 allow remote attackers to execute arbitrary SQL commands via unknown vectors. (no CVSS)
- [CVE-2005-1735](https://cve.now/CVE-2005-1735.md): Multiple cross-site scripting (XSS) vulnerabilities in PROMS before 0.11 allow remote attackers to inject arbitrary web script or HTML via… (no CVSS)
- [CVE-2005-1736](https://cve.now/CVE-2005-1736.md): PROMS 0.11 does not properly handle "certain combinations of rights," which gives more rights to users than intended. (no CVSS)
- [CVE-2005-1737](https://cve.now/CVE-2005-1737.md): Multiple unknown vulnerabilities in PROMS 0.11 allow "non-authorized users" to (1) view or modify the project member list or (2) modify… (no CVSS)
- [CVE-2005-1738](https://cve.now/CVE-2005-1738.md): Format string vulnerability in the logPrintBadfile function in delbadfiles.c Iron Bars SHell (ibsh) before 0.3d allows users to "access… (no CVSS)
- [CVE-2005-1739](https://cve.now/CVE-2005-1739.md): The XWD Decoder in ImageMagick before 6.2.2.3, and GraphicsMagick before 1.1.6-r1, allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2005-1740](https://cve.now/CVE-2005-1740.md): fixproc in Net-snmp 5.x before 5.2.1-r1 creates temporary files insecurely, which allows local users to modify the contents of those files… (no CVSS)
- [CVE-2005-1741](https://cve.now/CVE-2005-1741.md): Gearbox Software Halo: Combat Evolved 1.6 allows remote attackers to cause a denial of service (infinite loop) via malformed data. (no CVSS)
- [CVE-2005-1742](https://cve.now/CVE-2005-1742.md): BEA WebLogic Server and WebLogic Express 8.1 SP2 and SP3 allows users with the Monitor security role to "shrink or reset JDBC connection… (no CVSS)
- [CVE-2005-1743](https://cve.now/CVE-2005-1743.md): BEA WebLogic Server and WebLogic Express 8.1 through Service Pack 3 and 7.0 through Service Pack 5 does not properly handle when a… (no CVSS)
- [CVE-2005-1744](https://cve.now/CVE-2005-1744.md): BEA WebLogic Server and WebLogic Express 7.0 through Service Pack 5 does not log out users when an application is redeployed, which allows… (no CVSS)
- [CVE-2005-1745](https://cve.now/CVE-2005-1745.md): The UserLogin control in BEA WebLogic Portal 8.1 through Service Pack 3 prints the password to standard output when an incorrect login… (no CVSS)
- [CVE-2005-1746](https://cve.now/CVE-2005-1746.md): The cluster cookie parsing code in BEA WebLogic Server 7.0 through Service Pack 5 attempts to contact any host or port specified in a… (no CVSS)
- [CVE-2005-1747](https://cve.now/CVE-2005-1747.md): Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0 through Service… (no CVSS)
- [CVE-2005-1748](https://cve.now/CVE-2005-1748.md): The embedded LDAP server in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0 through Service Pack 5, allows remote… (no CVSS)
- [CVE-2005-1749](https://cve.now/CVE-2005-1749.md): Buffer overflow in BEA WebLogic Server and WebLogic Express 6.1 Service Pack 4 allows remote attackers to cause a denial of service (CPU… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2005-05-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.