# CVEs published 2005-02-14

7 CVEs were published on February 14, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-0229](https://cve.now/CVE-2005-0229.md): CitrusDB 0.3.5 and earlier stores the newfile.txt temporary data file under the web root, which allows remote attackers to steal credit card (no CVSS)
- [CVE-2005-0412](https://cve.now/CVE-2005-0412.md): Cross-site scripting (XSS) vulnerability in Spidean PostWrap allows remote attackers to inject arbitrary HTML and web script via the page pa (no CVSS)
- [CVE-2005-0413](https://cve.now/CVE-2005-0413.md): Multiple SQL injection vulnerabilities in MyPHP Forum 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the fid in forum. (no CVSS)
- [CVE-2005-0414](https://cve.now/CVE-2005-0414.md): SQL injection vulnerability in post.php for MercuryBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via a reply post ac (no CVSS)
- [CVE-2005-0415](https://cve.now/CVE-2005-0415.md): Multiple memory leaks in the MQL parser in Emdros before 1.1.22 allow remote attackers to cause a denial of service (memory consumption) via (no CVSS)
- [CVE-2005-0416](https://cve.now/CVE-2005-0416.md): The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote (no CVSS)
- [CVE-2005-0417](https://cve.now/CVE-2005-0417.md): Unknown "high risk" vulnerability in DB2 Universal Database 8.1 and earlier has unknown impact and attack vectors. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-02-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.