# CVEs published 2005-08-20

55 CVEs were published on August 20, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2004-2435](https://cve.now/CVE-2004-2435.md): Cross-site scripting (XSS) vulnerability in PeopleSoft Human Resources Management System (HRMS) 7.0, when "web enabled" using HTML Access… (no CVSS)
- [CVE-2004-2436](https://cve.now/CVE-2004-2436.md): Computer Associates Unicenter Common Services 3.0 and earlier stores the database "SA" password in cleartext in the TndAddNspTmp.bat file… (no CVSS)
- [CVE-2004-2437](https://cve.now/CVE-2004-2437.md): SQL injection vulnerability in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL commands via the rowstart parameter to (1)… (no CVSS)
- [CVE-2004-2438](https://cve.now/CVE-2004-2438.md): Cross-site scripting (XSS) vulnerability in PHP-Fusion 4.01 allows remote attackers to inject arbitrary web script or HTML via the (1)… (no CVSS)
- [CVE-2004-2439](https://cve.now/CVE-2004-2439.md): The remote upgrade capability in HP LaserJet 4200 and 4300 printers does not require a password, which allows remote attackers to upgrade… (no CVSS)
- [CVE-2004-2440](https://cve.now/CVE-2004-2440.md): Unspecified vulnerability in cmdline.c in proxytunnel 1.1.3 and earlier allows local users to obtain proxy credentials (username or… (no CVSS)
- [CVE-2004-2441](https://cve.now/CVE-2004-2441.md): Unspecified vulnerability in Kerio MailServer before 6.0.3 has unknown impact and unknown remote attack vectors, related to a "potential… (no CVSS)
- [CVE-2004-2442](https://cve.now/CVE-2004-2442.md): Multiple interpretation error in various F-Secure Anti-Virus products, including Workstation 5.43 and earlier, Windows Servers 5.50 and… (no CVSS)
- [CVE-2004-2443](https://cve.now/CVE-2004-2443.md): Jaws 0.3 allows remote attackers to bypass authentication and via an HTTP request to admin.php with the logged cookie set to the MD5 hash… (no CVSS)
- [CVE-2004-2444](https://cve.now/CVE-2004-2444.md): Cross-site scripting (XSS) vulnerability in index.php in Jaws 0.3 allows remote attackers to inject arbitrary web script or HTML via the… (no CVSS)
- [CVE-2004-2445](https://cve.now/CVE-2004-2445.md): Directory traversal vulnerability in index.php in Jaws 0.3 BETA allows remote attackers to view arbitrary files via a .. (no CVSS)
- [CVE-2004-2446](https://cve.now/CVE-2004-2446.md): Directory traversal vulnerability in 1st Class Mail Server 4.01 allows remote attackers to read arbitrary files via a ".." (dot dot)… (no CVSS)
- [CVE-2004-2447](https://cve.now/CVE-2004-2447.md): Cross-site scripting (XSS) vulnerability in 1st Class Mail Server 4.01 allows remote attackers to inject arbitrary web script or HTML via… (no CVSS)
- [CVE-2004-2448](https://cve.now/CVE-2004-2448.md): S-Mart Shopping Cart or RediCart 3.9.5b stores smart.cfg under the web document root with insufficient access control, which allows remote… (no CVSS)
- [CVE-2004-2449](https://cve.now/CVE-2004-2449.md): Roger Wilco 1.4.1.6 and earlier or Roger Wilco Base Station 0.30a and earlier allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2004-2450](https://cve.now/CVE-2004-2450.md): The client and server for Roger Wilco 1.4.1.6 and earlier or Roger Wilco Base Station 0.30a and earlier report sensitive information such… (no CVSS)
- [CVE-2004-2451](https://cve.now/CVE-2004-2451.md): Roger Wilco 1.4.1.6 and earlier, or Roger Wilco Base Station 0.30a or earlier, allows remote attackers to send audio to arbitrary… (no CVSS)
- [CVE-2004-2452](https://cve.now/CVE-2004-2452.md): Unknown vulnerability in Hitachi Cosminexus Portal Framework 01-00, 01-01, 01-02, 02-01, 02-02, 02-03, and other versions allows remote… (no CVSS)
- [CVE-2004-2453](https://cve.now/CVE-2004-2453.md): Unknown vulnerability in Tutti Nova 0.10 through 0.12 (Beta) and 0.9.4, when register\_globals is enabled, has unknown impact and attack… (no CVSS)
- [CVE-2004-2454](https://cve.now/CVE-2004-2454.md): aMSN 0.90 for Microsoft Windows allows local users to obtain sensitive information such as hashed passwords from (1) hotlog.htm and (2)… (no CVSS)
- [CVE-2004-2455](https://cve.now/CVE-2004-2455.md): Sweex Wireless Broadband Router/Accesspoint 802.11g (LC000060) allows remote attackers to obtain sensitive information and gain privileges… (no CVSS)
- [CVE-2004-2456](https://cve.now/CVE-2004-2456.md): SQL injection vulnerability in index.php in miniBB 1.7f and earlier allows remote attackers to execute arbitrary SQL commands via the user… (no CVSS)
- [CVE-2004-2457](https://cve.now/CVE-2004-2457.md): Unspecified vulnerability in 3Com OfficeConnect ADSL 11g Router allows remote attackers to cause a denial of service (crash) via a large… (no CVSS)
- [CVE-2004-2458](https://cve.now/CVE-2004-2458.md): Open WebMail 2.30 and earlier, when use\_syshomedir is disabled or create\_syshomedir is enabled, creates new directories before… (no CVSS)
- [CVE-2004-2459](https://cve.now/CVE-2004-2459.md): Unknown vulnerability in gnubiff 1.2.0 and earlier allows local users to obtain passwords, related to the password table. (no CVSS)
- [CVE-2004-2460](https://cve.now/CVE-2004-2460.md): Unknown vulnerability in POP3 in gnubiff before 2.0.0 allows remote attackers to cause a denial of service (application crash) via an… (no CVSS)
- [CVE-2004-2461](https://cve.now/CVE-2004-2461.md): Buffer overflow in pop3.c in gnubiff before 2.0.0 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code. (no CVSS)
- [CVE-2004-2462](https://cve.now/CVE-2004-2462.md): cplay 1.49 on Linux allows local users to overwrite arbitrary files via a symlink attack on the cplay\_control temporary file. (no CVSS)
- [CVE-2004-2463](https://cve.now/CVE-2004-2463.md): Buffer overflow in ADA Image Server (ImgSvr) 0.4 allows remote attackers to cause a denial of service (web server crash) or execute… (no CVSS)
- [CVE-2004-2464](https://cve.now/CVE-2004-2464.md): Directory traversal vulnerability in ADA Image Server (ImgSvr) 0.4 allows remote attackers to read arbitrary files or list directories via… (no CVSS)
- [CVE-2004-2465](https://cve.now/CVE-2004-2465.md): Cross-site scripting (XSS) vulnerability in chat.ghp in Easy Chat Server 1.2 allows remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2004-2466](https://cve.now/CVE-2004-2466.md): chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service (server crash) via a long username parameter… (no CVSS)
- [CVE-2004-2467](https://cve.now/CVE-2004-2467.md): chat.ghp in Easy Chat Server 1.2 allows remote attackers to add a large number of fake users, then eventually cause a denial of service… (no CVSS)
- [CVE-2004-2468](https://cve.now/CVE-2004-2468.md): Cross-site scripting (XSS) vulnerability in SillySearch 2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via… (no CVSS)
- [CVE-2004-2469](https://cve.now/CVE-2004-2469.md): Unspecified vulnerability in Reservation.class.php for phpScheduleIt 1.01 and earlier allows attackers to modify or delete reservations. (no CVSS)
- [CVE-2004-2470](https://cve.now/CVE-2004-2470.md): Unspecified vulnerability in MadBMS before 1.1.5 has unknown impact and attack vectors, related to logins. (no CVSS)
- [CVE-2004-2471](https://cve.now/CVE-2004-2471.md): SQL injection vulnerability in the sloth TCL script in QuoteEngine before 1.2.0 allow remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2004-2472](https://cve.now/CVE-2004-2472.md): Agnitum Outpost Pro Firewall 2.1 allows remote attackers to cause a denial of service (CPU consumption) via a flood of small, invalid… (no CVSS)
- [CVE-2004-2473](https://cve.now/CVE-2004-2473.md): wmFrog weather monitor 0.1.6 and other versions before 0.2.0 allows local users to overwrite arbitrary files via a symlink attack on… (no CVSS)
- [CVE-2004-2474](https://cve.now/CVE-2004-2474.md): SQL injection vulnerability in PHPNews 1.2.3 allows remote attackers to execute arbitrary SQL commands via the mid parameter to… (no CVSS)
- [CVE-2004-2475](https://cve.now/CVE-2004-2475.md): Cross-site scripting (XSS) vulnerability in Google Toolbar 2.0.114.1 allows remote attackers to inject arbitrary web script via about.html… (no CVSS)
- [CVE-2004-2476](https://cve.now/CVE-2004-2476.md): Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (infinite loop and crash) via an IFRAME with "?" as… (no CVSS)
- [CVE-2005-0357](https://cve.now/CVE-2005-0357.md): EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 rely on AUTH\_UNIX authentication… (no CVSS)
- [CVE-2005-0358](https://cve.now/CVE-2005-0358.md): EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 do not properly verify authentication… (no CVSS)
- [CVE-2005-0359](https://cve.now/CVE-2005-0359.md): The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not… (no CVSS)
- [CVE-2005-2631](https://cve.now/CVE-2005-2631.md): Cisco Clean Access (CCA) 3.3.0 to 3.3.9, 3.4.0 to 3.4.5, and 3.5.0 to 3.5.3 does not properly authenticate users when invoking API… (no CVSS)
- [CVE-2005-2632](https://cve.now/CVE-2005-2632.md): SQL injection vulnerability in login\_admin\_mediabox404.php in mediabox404 1.2 and earlier allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2005-2633](https://cve.now/CVE-2005-2633.md): Multiple PHP file inclusion vulnerabilities in (1) admin\_o.php, (2) board\_o.php, (3) dev\_o.php, (4) file\_o.php or (5) tech\_o.php in PHPTB… (no CVSS)
- [CVE-2005-2634](https://cve.now/CVE-2005-2634.md): Buffer overflow in the Log-SCR function in the "Log to Screen" feature in WinFtp Server 1.6.8 allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2005-2635](https://cve.now/CVE-2005-2635.md): Multiple directory traversal vulnerabilities in phpAdsNew and phpPgAds before 2.0.6 allow remote attackers to include arbitrary files via… (no CVSS)
- [CVE-2005-2636](https://cve.now/CVE-2005-2636.md): SQL injection vulnerability in lib-view-direct.inc.php in phpAdsNew and phpPgAds before 2.0.6 allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2005-2637](https://cve.now/CVE-2005-2637.md): Multiple SQL injection vulnerabilities in PHPFreeNews 1.40 and earlier allow remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2005-2638](https://cve.now/CVE-2005-2638.md): Multiple cross-site scripting (XSS) vulnerabilities in PHPFreeNews 1.40 and earlier allow remote attackers to inject arbitrary web script… (no CVSS)
- [CVE-2005-2639](https://cve.now/CVE-2005-2639.md): Buffer overflow in Chris Moneymaker's World Poker Championship 1.0 allows remote attackers to cause a denial of service (application… (no CVSS)
- [CVE-2005-2640](https://cve.now/CVE-2005-2640.md): Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2005-08-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.