# CVEs published 2005-12-08

29 CVEs were published on December 8, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-3661](https://cve.now/CVE-2005-3661.md): Dell TrueMobile 2300 Wireless Broadband Router running firmware 3.0.0.8 and 5.1.1.6, and possibly other versions, allows remote attackers… (no CVSS)
- [CVE-2005-3665](https://cve.now/CVE-2005-3665.md): Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.7.0 allow remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2005-4086](https://cve.now/CVE-2005-4086.md): Directory traversal vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and… (no CVSS)
- [CVE-2005-4087](https://cve.now/CVE-2005-4087.md): PHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta… (no CVSS)
- [CVE-2005-4088](https://cve.now/CVE-2005-4088.md): SQL injection vulnerability in index.php in phpForumPro 2.2 allows remote attackers to execute arbitrary SQL commands via the (1) parent… (no CVSS)
- [CVE-2005-4089](https://cve.now/CVE-2005-4089.md): Microsoft Internet Explorer allows remote attackers to bypass cross-domain security restrictions and obtain sensitive information by using… (no CVSS)
- [CVE-2005-4090](https://cve.now/CVE-2005-4090.md): Unspecified vulnerability in HP-UX B.11.00 to B.11.23, when IPSEC is running, allows remote attackers to have unknown impact. (no CVSS)
- [CVE-2005-4091](https://cve.now/CVE-2005-4091.md): Cross-site scripting (XSS) vulnerability in 1search.cgi in 1-Script 1-Search 1.8 allows remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2005-4092](https://cve.now/CVE-2005-4092.md): Multiple heap-based buffer overflows in QuickTime.qts in Apple QuickTime Player 7.0.3 and iTunes 6.0.1 (3) and earlier allow remote… (no CVSS)
- [CVE-2005-4093](https://cve.now/CVE-2005-4093.md): Check Point VPN-1 SecureClient NG with Application Intelligence R56, NG FP1, 4.0, and 4.1 allows remote attackers to bypass security… (no CVSS)
- [CVE-2005-4094](https://cve.now/CVE-2005-4094.md): connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to execute arbitrary PHP by using the FileUpload… (no CVSS)
- [CVE-2005-4095](https://cve.now/CVE-2005-4095.md): Directory traversal vulnerability in connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to list arbitrary… (no CVSS)
- [CVE-2005-3192](https://cve.now/CVE-2005-3192.md): Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf… (no CVSS)
- [CVE-2005-4068](https://cve.now/CVE-2005-4068.md): Unspecified "absolute path vulnerability" in umountall in IBM AIX 5.1 through 5.3 allows local users to cause unknown impact via unknown… (no CVSS)
- [CVE-2005-4069](https://cve.now/CVE-2005-4069.md): SunnComm MediaMax DRM 5.0.21.0, as used by Sony BMG, assigns insecure Everyone/Full Control permissions to the "SunnComm Shared"… (no CVSS)
- [CVE-2005-4071](https://cve.now/CVE-2005-4071.md): Multiple SQL injection vulnerabilities in CFMagic Magic Forum Personal 2.5 and earlier allow remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2005-4072](https://cve.now/CVE-2005-4072.md): Cross-site scripting (XSS) vulnerability in CFMagic Magic Forum Personal 2.5 and earlier allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2005-4073](https://cve.now/CVE-2005-4073.md): SQL injection vulnerability in view\_archive.cfm in CFMagic Magic List Pro 2.5 allows remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2005-4074](https://cve.now/CVE-2005-4074.md): Directory traversal vulnerability in index.cfm in CF\_Nuke 4.6 and earlier, when Sandbox Security is disabled, allows remote attackers to… (no CVSS)
- [CVE-2005-4075](https://cve.now/CVE-2005-4075.md): Multiple cross-site scripting (XSS) vulnerabilities in index.cfm in CF\_Nuke 4.6 and earlier allow remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2005-4076](https://cve.now/CVE-2005-4076.md): Buffer overflow in Appfluent Technology Database IDS 2.0 allows local users to execute arbitrary code via a long APPFLUENT\_HOME… (no CVSS)
- [CVE-2005-4077](https://cve.now/CVE-2005-4077.md): Multiple off-by-one errors in the cURL library (libcurl) 7.11.2 through 7.15.0 allow local users to trigger a buffer overflow and cause a… (no CVSS)
- [CVE-2005-4078](https://cve.now/CVE-2005-4078.md): Multiple cross-site scripting (XSS) vulnerabilities in Ideal BB.NET 1.3 and earlier allow remote attackers to inject arbitrary web script… (no CVSS)
- [CVE-2005-4079](https://cve.now/CVE-2005-4079.md): The register\_globals emulation in phpMyAdmin 2.7.0 rc1 allows remote attackers to exploit other vulnerabilities in phpMyAdmin by modifying… (no CVSS)
- [CVE-2005-4080](https://cve.now/CVE-2005-4080.md): Horde IMP 4.0.4 and earlier does not sanitize strings containing UTF16 null characters, which allows remote attackers to conduct… (no CVSS)
- [CVE-2005-4081](https://cve.now/CVE-2005-4081.md): Multiple SQL injection vulnerabilities in Alisveristr E-commerce allow remote attackers to bypass authentication and possibly execute… (no CVSS)
- [CVE-2005-4082](https://cve.now/CVE-2005-4082.md): The dhcp.client program for QNX 4.25 vmware is setuid, possibly by default, which allows local users to modify the NIC configuration and… (no CVSS)
- [CVE-2005-4083](https://cve.now/CVE-2005-4083.md): Directory traversal vulnerability in xs\_edit.php in the eXtreme Styles phpBB module 2.2.1 and earlier allows remote attackers to read… (no CVSS)
- [CVE-2005-4084](https://cve.now/CVE-2005-4084.md): xs\_edit.php in the phpBB eXtreme Styles module 2.2.1 and earlier allows remote attackers to obtain the installation path of the… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2005-12-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.