# CVEs published 2005-09-07

21 CVEs were published on September 7, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-2794](https://cve.now/CVE-2005-2794.md): store.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (crash) via certain aborted requests that… (no CVSS)
- [CVE-2005-2796](https://cve.now/CVE-2005-2796.md): The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2005-2807](https://cve.now/CVE-2005-2807.md): frox 0.7.18, when running setuid root, does not properly drop privileges when reading a configuration file, which allows local users to… (no CVSS)
- [CVE-2005-2808](https://cve.now/CVE-2005-2808.md): frox 0.7.16 and 0.7.17 does not properly parse certain Deny ACLs, which might allow attackers to bypass intended restrictions and access… (no CVSS)
- [CVE-2005-2809](https://cve.now/CVE-2005-2809.md): silc daemon (silcd.c) in Secure Internet Live Conferencing (SILC) 1.0 and earlier allows local users to overwrite arbitrary files via a… (no CVSS)
- [CVE-2005-2810](https://cve.now/CVE-2005-2810.md): Multiple stack-based buffer overflows in urban before 1.5.3 allow local users to gain privileges via a long HOME environment variable to… (no CVSS)
- [CVE-2005-2811](https://cve.now/CVE-2005-2811.md): Untrusted search path vulnerability in Net-SNMP 5.2.1.2 and earlier, on Gentoo Linux, installs certain Perl modules with an insecure… (no CVSS)
- [CVE-2005-2812](https://cve.now/CVE-2005-2812.md): man2web allows remote attackers to execute arbitrary commands via -P arguments. (no CVSS)
- [CVE-2005-2813](https://cve.now/CVE-2005-2813.md): Directory traversal vulnerability in FlatNuke 2.5.6 and possibly earlier allows remote attackers to read arbitrary files via ".."… (no CVSS)
- [CVE-2005-2814](https://cve.now/CVE-2005-2814.md): Cross-site scripting (XSS) vulnerability in FlatNuke 2.5.6 allows remote attackers to inject arbitrary web script or HTML via the usr… (no CVSS)
- [CVE-2005-2815](https://cve.now/CVE-2005-2815.md): print.php in FlatNuke 2.5.6 allows remote attackers to obtain sensitive information (path disclosure on error) or cause a denial of… (no CVSS)
- [CVE-2005-2816](https://cve.now/CVE-2005-2816.md): Cross-site scripting (XSS) vulnerability in Greymatter allows remote attackers to inject arbitrary web script or HTML via a post comment… (no CVSS)
- [CVE-2005-2817](https://cve.now/CVE-2005-2817.md): Simple Machines Forum (SMF) 1-0-5 and earlier supports the use of URLs for avatar images, which allows remote attackers to monitor… (no CVSS)
- [CVE-2005-2818](https://cve.now/CVE-2005-2818.md): Cross-site scripting (XSS) vulnerability in DownFile 1.3 allows remote attackers to inject arbitrary web script or HTML via the id… (no CVSS)
- [CVE-2005-2819](https://cve.now/CVE-2005-2819.md): DownFile 1.3 allows remote attackers to gain administrator privileges via a direct request to (1) update.php, (2) del.php, and (3)… (no CVSS)
- [CVE-2005-2820](https://cve.now/CVE-2005-2820.md): Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web script or HTML via an e-mail… (no CVSS)
- [CVE-2005-2836](https://cve.now/CVE-2005-2836.md): Multiple cross-site scripting (XSS) vulnerabilities in Phorum 5.0.17a and earlier allow remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2005-2837](https://cve.now/CVE-2005-2837.md): Multiple eval injection vulnerabilities in PlainBlack Software WebGUI before 6.7.3 allow remote attackers to execute arbitrary Perl code… (no CVSS)
- [CVE-2005-2838](https://cve.now/CVE-2005-2838.md): SQL injection vulnerability in login.php in myBloggie 2.1.3-beta and earlier allows remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2005-2839](https://cve.now/CVE-2005-2839.md): Multiple cross-site scripting (XSS) vulnerabilities in MAXdev MD-Pro 1.0.72 allow remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2005-2840](https://cve.now/CVE-2005-2840.md): Multiple unknown vulnerabilities in MAXdev MD-Pro 1.0.72 and earlier have unknown impact and unspecified attack vectors, in one or more of… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2005-09-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.