# CVEs published 2005-05-25 24 CVEs were published on May 25, 2005: 0 critical, 0 high. Days are UTC. - [CVE-2005-1151](https://cve.now/CVE-2005-1151.md): qpopper 4.0.5 and earlier does not properly drop privileges before processing certain user-supplied files, which allows local users to… (no CVSS) - [CVE-2005-1152](https://cve.now/CVE-2005-1152.md): popauth.c in qpopper 4.0.5 and earlier does not properly set the umask, which may cause qpopper to create files with group or… (no CVSS) - [CVE-2005-1249](https://cve.now/CVE-2005-1249.md): The IMAP daemon (IMAPD32.EXE) in Ipswitch Collaboration Suite (ICS) allows remote attackers to cause a denial of service (CPU consumption)… (no CVSS) - [CVE-2005-1252](https://cve.now/CVE-2005-1252.md): Directory traversal vulnerability in the Web Calendaring server in Ipswitch Imail 8.13, and other versions before IMail Server 8.2 Hotfix… (no CVSS) - [CVE-2005-1254](https://cve.now/CVE-2005-1254.md): Stack-based buffer overflow in the IMAP server for Ipswitch IMail 8.12 and 8.13, and other versions before IMail Server 8.2 Hotfix 2… (no CVSS) - [CVE-2005-1255](https://cve.now/CVE-2005-1255.md): Multiple stack-based buffer overflows in the IMAP server in IMail 8.12 and 8.13 in Ipswitch Collaboration Suite (ICS), and other versions… (no CVSS) - [CVE-2005-1256](https://cve.now/CVE-2005-1256.md): Stack-based buffer overflow in the IMAP daemon (IMAPD32.EXE) in IMail 8.13 in Ipswitch Collaboration Suite (ICS), and other versions… (no CVSS) - [CVE-2005-1543](https://cve.now/CVE-2005-1543.md): Multiple stack-based and heap-based buffer overflows in Remote Management authentication (zenrem32.exe) on Novell ZENworks 6.5 Desktop and… (no CVSS) - [CVE-2005-1675](https://cve.now/CVE-2005-1675.md): Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 installs the client… (no CVSS) - [CVE-2005-1676](https://cve.now/CVE-2005-1676.md): Multiple cross-site scripting (XSS) vulnerabilities in Groove Mobile Workspace in Groove Virtual Office before 3.1 build 2338, before 3.1a… (no CVSS) - [CVE-2005-1677](https://cve.now/CVE-2005-1677.md): Unknown vulnerability in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871… (no CVSS) - [CVE-2005-1678](https://cve.now/CVE-2005-1678.md): Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 does not properly display… (no CVSS) - [CVE-2005-1679](https://cve.now/CVE-2005-1679.md): Stack-based buffer overflow in the error directive in picasm 1.12b and earlier allows attackers to execute arbitrary code via a long error… (no CVSS) - [CVE-2005-1680](https://cve.now/CVE-2005-1680.md): D-Link DSL-502T, DSL-504T, DSL-562T, and DSL-G604T, when /cgi-bin/firmwarecfg is executed, allows remote attackers to bypass… (no CVSS) - [CVE-2005-1681](https://cve.now/CVE-2005-1681.md): PHP remote file inclusion vulnerability in common.php in phpATM 1.21, and possibly earlier versions, allows remote attackers to execute… (no CVSS) - [CVE-2005-1682](https://cve.now/CVE-2005-1682.md): JavaMail API, as used by Solstice Internet Mail Server POP3 2.0, does not properly validate the message number in the MimeMessage… (no CVSS) - [CVE-2005-1683](https://cve.now/CVE-2005-1683.md): Buffer overflow in winword.exe 10.2627.6714 and earlier in Microsoft Word for the Macintosh, before SP3 for Word 2002, allows remote… (no CVSS) - [CVE-2005-1684](https://cve.now/CVE-2005-1684.md): Cross-site scripting (XSS) vulnerability in default.asp for episodex guestbook allows remote attackers to inject arbitrary web script or… (no CVSS) - [CVE-2005-1685](https://cve.now/CVE-2005-1685.md): episodex guestbook allows remote attackers to bypass authentication and edit scripts via a direct request to admin.asp. (no CVSS) - [CVE-2005-1686](https://cve.now/CVE-2005-1686.md): Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service (application crash) via a bin file with… (no CVSS) - [CVE-2005-1687](https://cve.now/CVE-2005-1687.md): SQL injection vulnerability in wp-trackback.php in Wordpress 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via… (no CVSS) - [CVE-2005-1688](https://cve.now/CVE-2005-1688.md): Wordpress 1.5 and earlier allows remote attackers to obtain sensitive information via a direct request to files in (1) wp-content/themes/… (CVSS 5.3) - [CVE-2005-1750](https://cve.now/CVE-2005-1750.md): SQL injection vulnerability in login.asp in ezdwc NewsletterEz 3.0 allows remote attackers to execute arbitrary SQL commands via the… (no CVSS) - [CVE-2005-1751](https://cve.now/CVE-2005-1751.md): Race condition in shtool 2.0.1 and earlier allows local users to create or modify arbitrary files via a symlink attack on the .shtool.$$… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2005-05-25 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.