# CVEs published 2005-02-17

16 CVEs were published on February 17, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2004-1489](https://cve.now/CVE-2004-1489.md): Opera 7.54 and earlier does not properly limit an applet's access to internal Java packages from Sun, which allows remote attackers to gain (no CVSS)
- [CVE-2004-1490](https://cve.now/CVE-2004-1490.md): Opera 7.54 and earlier allows remote attackers to spoof file types in the download dialog via dots and non-breaking spaces (ASCII character (no CVSS)
- [CVE-2004-1491](https://cve.now/CVE-2004-1491.md): Opera 7.54 and earlier uses kfmclient exec to handle unknown MIME types, which allows remote attackers to execute arbitrary code via a short (no CVSS)
- [CVE-2005-0251](https://cve.now/CVE-2005-0251.md): Cross-site scripting (XSS) vulnerability in bibindex.php for BibORB 1.3.2, and possibly earlier versions, allows remote attackers to inject (no CVSS)
- [CVE-2005-0252](https://cve.now/CVE-2005-0252.md): SQL injection vulnerability in BibORB 1.3.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via th (no CVSS)
- [CVE-2005-0253](https://cve.now/CVE-2005-0253.md): Directory traversal vulnerability in index.php for BibORB 1.3.2, and possibly earlier versions, allows remote attackers to delete arbitrary (no CVSS)
- [CVE-2005-0254](https://cve.now/CVE-2005-0254.md): BibORB 1.3.2, and possibly earlier versions, does not properly enforce a restriction for uploading only PDF and PS files, which allows remot (CVSS 3.7)
- [CVE-2005-0372](https://cve.now/CVE-2005-0372.md): Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP servers to read arbitrary files via .. (no CVSS)
- [CVE-2005-0456](https://cve.now/CVE-2005-0456.md): Opera 7.54 and earlier does not properly validate base64 encoded binary data in a data: (RFC 2397) URL, which causes the URL to be obscured (no CVSS)
- [CVE-2005-0457](https://cve.now/CVE-2005-0457.md): Opera 7.54 and earlier on Gentoo Linux uses an insecure path for plugins, which could allow local users to gain privileges by inserting mali (no CVSS)
- [CVE-2005-0458](https://cve.now/CVE-2005-0458.md): Cross-site scripting (XSS) vulnerability in contact\_us.php in osCommerce 2.2-MS2 allows remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2005-0459](https://cve.now/CVE-2005-0459.md): phpMyAdmin 2.6.2-dev, and possibly earlier versions, allows remote attackers to determine the full path of the web root via a direct request (no CVSS)
- [CVE-2005-0460](https://cve.now/CVE-2005-0460.md): index.php in MercuryBoard 1.0.x and 1.1.x allows remote attackers to obtain sensitive information by setting the debug parameter. (no CVSS)
- [CVE-2005-0461](https://cve.now/CVE-2005-0461.md): Unknown vulnerability in NewsBruiser 2.x before 2.6.1 allows remote attackers to "take actions on comments." (no CVSS)
- [CVE-2005-0462](https://cve.now/CVE-2005-0462.md): Cross-site scripting (XSS) vulnerability in MercuryBoard 1.0.x and 1.1.x allows remote attackers to inject arbitrary HTML and web script via (no CVSS)
- [CVE-2005-0463](https://cve.now/CVE-2005-0463.md): Unknown "major security flaws" in Ulog-php before 1.0, related to input validation, have unknown impact and attack vectors, probably related (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-02-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.