# CVEs published 2005-09-22

14 CVEs were published on September 22, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-3031](https://cve.now/CVE-2005-3031.md): Buffer overflow in vxFtpSrv 0.9.7 allows remote attackers to execute arbitrary code via a long USER name. (no CVSS)
- [CVE-2005-3032](https://cve.now/CVE-2005-3032.md): Buffer overflow in vxTftpSrv 1.7.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a… (no CVSS)
- [CVE-2005-3033](https://cve.now/CVE-2005-3033.md): Stack-based buffer overflow in vxWeb 1.1.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary… (no CVSS)
- [CVE-2005-3034](https://cve.now/CVE-2005-3034.md): Compuware DriverStudio Remote Control service (DSRsvc.exe) 2.7 and 3.0 beta 2 allows remote attackers to bypass authentication via a null… (no CVSS)
- [CVE-2005-3035](https://cve.now/CVE-2005-3035.md): Compuware DriverStudio Remote Control service (DSRsvc.exe) 2.7 and 3.0 beta 2 allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2005-3036](https://cve.now/CVE-2005-3036.md): File Transfer Anywhere 3.01 stores sensitive password information in plaintext in the PASS value in the "File Transfer Anywhere" registry… (no CVSS)
- [CVE-2005-3037](https://cve.now/CVE-2005-3037.md): Cross-site scripting (XSS) vulnerability in Handy Address Book Server 1.1 allows remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2005-3038](https://cve.now/CVE-2005-3038.md): Unspecified vulnerability in Hosting Controller 6.1 before Hotfix 2.4 allows remote attackers to list and read contents of arbitrary… (no CVSS)
- [CVE-2005-3039](https://cve.now/CVE-2005-3039.md): SQL injection vulnerability in infopage.asp in Mall23 eCommerce allows remote attackers to execute arbitrary SQL commands via the idPage… (no CVSS)
- [CVE-2005-3040](https://cve.now/CVE-2005-3040.md): Directory traversal vulnerability in the web interface (ISALogin.dll) for TAC Vista 4.0, and possibly other versions before 4.3, allows… (no CVSS)
- [CVE-2005-3041](https://cve.now/CVE-2005-3041.md): Unspecified "drag-and-drop vulnerability" in Opera Web Browser before 8.50 on Windows allows "unintentional file uploads." (no CVSS)
- [CVE-2005-3042](https://cve.now/CVE-2005-3042.md): miniserv.pl in Webmin before 1.230 and Usermin before 1.160, when "full PAM conversations" is enabled, allows remote attackers to bypass… (no CVSS)
- [CVE-2005-3043](https://cve.now/CVE-2005-3043.md): SQL injection vulnerability in AddItem.asp in Mall23 eCommerce allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2005-3044](https://cve.now/CVE-2005-3044.md): Multiple vulnerabilities in Linux kernel before 2.6.13.2 allow local users to cause a denial of service (kernel OOPS from null… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2005-09-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.