# CVEs published 2005-08-21

20 CVEs were published on August 21, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2004-2477](https://cve.now/CVE-2004-2477.md): DiamondCS Process Guard Free 2.000 allows local users to disable the process guard protection system by overwriting the current Service… (no CVSS)
- [CVE-2004-2478](https://cve.now/CVE-2004-2478.md): Unspecified vulnerability in Jetty HTTP Server, as used in (1) IBM Trading Partner Interchange before 4.2.4, (2) CA Unicenter Web Services… (no CVSS)
- [CVE-2004-2479](https://cve.now/CVE-2004-2479.md): Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause… (no CVSS)
- [CVE-2004-2480](https://cve.now/CVE-2004-2480.md): Squid Web Proxy Cache 2.3.STABLE5 allows remote attackers to bypass security controls and access arbitrary websites via "@@" sequences in… (no CVSS)
- [CVE-2004-2481](https://cve.now/CVE-2004-2481.md): MyProxy 6.58 allows remote authenticated users in the Users Tab to connect to arbitrary hosts from the MyProxy server, possibly bypassing… (no CVSS)
- [CVE-2004-2482](https://cve.now/CVE-2004-2482.md): Microsoft Outlook 2000 and 2003, when configured to use Microsoft Word 2000 or 2003 as the e-mail editor and when forwarding e-mail, does… (no CVSS)
- [CVE-2004-2483](https://cve.now/CVE-2004-2483.md): Kerio WinRoute Firewall before 6.0.9 uses information from PTR queries in response to A queries, which allows remote attackers to poison… (no CVSS)
- [CVE-2005-2641](https://cve.now/CVE-2005-2641.md): Unknown vulnerability in pam\_ldap before 180 does not properly handle a new password policy control, which could allow attackers to gain… (no CVSS)
- [CVE-2005-2642](https://cve.now/CVE-2005-2642.md): Buffer overflow in the mutt\_decode\_xbit function in Handler.c for Mutt 1.5.10 allows remote attackers to execute arbitrary code, possibly… (no CVSS)
- [CVE-2005-2643](https://cve.now/CVE-2005-2643.md): Tor 0.1.0.13 and earlier, and experimental versions 0.1.1.4-alpha and earlier, does not reject certain weak keys when using ephemeral… (no CVSS)
- [CVE-2005-2644](https://cve.now/CVE-2005-2644.md): Buffer overflow in JaguarEditControl.dll in Isemarket JaguarControl allows remote attackers to cause a denial of service (crash) and… (no CVSS)
- [CVE-2005-2645](https://cve.now/CVE-2005-2645.md): Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through… (no CVSS)
- [CVE-2005-2646](https://cve.now/CVE-2005-2646.md): Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through… (no CVSS)
- [CVE-2005-2647](https://cve.now/CVE-2005-2647.md): Cross-site scripting (XSS) vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490… (no CVSS)
- [CVE-2005-2648](https://cve.now/CVE-2005-2648.md): Directory traversal vulnerability in index.php in W-Agora 4.2.0 and earlier allows remote attackers to read arbitrary files via the site… (no CVSS)
- [CVE-2005-2649](https://cve.now/CVE-2005-2649.md): Cross-site scripting (XSS) vulnerability in ATutor 1.5.1 allows remote attackers to inject arbitrary web script or HTML via (1) course… (no CVSS)
- [CVE-2005-2650](https://cve.now/CVE-2005-2650.md): Cross-site scripting (XSS) vulnerability in sign.asp in Emefa Guestbook 1.2 allows remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2005-2651](https://cve.now/CVE-2005-2651.md): gorum/prod.php in Zorum 3.5 allows remote attackers to execute arbitrary code via shell metacharacters in the argv parameter. (no CVSS)
- [CVE-2005-2652](https://cve.now/CVE-2005-2652.md): Zorum 3.5 allows remote attackers to obtain the full installation path via direct requests to (1) gorum/notification.php, (2) user.php… (no CVSS)
- [CVE-2005-2653](https://cve.now/CVE-2005-2653.md): Cross-site scripting (XSS) vulnerability in BBCaffe 2.0 allows remote attackers to inject arbitrary web script or HTML via e-mail data in… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2005-08-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.