# CVEs published 2005-02-19

71 CVEs were published on February 19, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2004-1492](https://cve.now/CVE-2004-1492.md): Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service (game exit) via a data packet that contains a lar (no CVSS)
- [CVE-2004-1493](https://cve.now/CVE-2004-1493.md): Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service (server crash) via multiple connections with long (no CVSS)
- [CVE-2004-1494](https://cve.now/CVE-2004-1494.md): Buffer overflow in the Screen Fetch option in XDICT 2002 through 2005 allows remote attackers to cause a denial of service ( CPU consumption (no CVSS)
- [CVE-2004-1495](https://cve.now/CVE-2004-1495.md): The Repair Archive command in WinRAR 3.40 allows remote attackers to cause a denial of service (application crash) via a corrupt ZIP archive (no CVSS)
- [CVE-2004-1496](https://cve.now/CVE-2004-1496.md): Directory traversal vulnerability in Web Forums Server 1.6 and 2.0 Power Pack allows remote attackers to read arbitrary files via a URL cont (no CVSS)
- [CVE-2004-1497](https://cve.now/CVE-2004-1497.md): Web Forums Server 1.6 and 2.0 Power Pack stores passwords in plaintext in the Username.ini file, which allows local users to gain privileges (no CVSS)
- [CVE-2004-1498](https://cve.now/CVE-2004-1498.md): SQL injection vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2004-1499](https://cve.now/CVE-2004-1499.md): Cross-site scripting (XSS) vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2004-1500](https://cve.now/CVE-2004-1500.md): Format string vulnerability in the Lithtech engine, as used in multiple games, allows remote authenticated users to cause a denial of servic (no CVSS)
- [CVE-2004-1501](https://cve.now/CVE-2004-1501.md): The webmail service in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause a denial of service (CPU and memory consump (no CVSS)
- [CVE-2004-1502](https://cve.now/CVE-2004-1502.md): The Telnet proxy in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause a denial of service (socket exhaustion) via a (no CVSS)
- [CVE-2004-1503](https://cve.now/CVE-2004-1503.md): Integer overflow in the InitialDirContext in Java Runtime Environment (JRE) 1.4.2, 1.5.0 and possibly other versions allows remote attackers (no CVSS)
- [CVE-2004-1504](https://cve.now/CVE-2004-1504.md): The displaycontent function in config.php for Just Another Flat file (JAF) CMS 3.0RC allows remote attackers to gain sensitive information v (no CVSS)
- [CVE-2004-1505](https://cve.now/CVE-2004-1505.md): Directory traversal vulnerability in index.php in Just Another Flat file (JAF) CMS 3.0RC allows remote attackers to read arbitrary files and (no CVSS)
- [CVE-2004-1506](https://cve.now/CVE-2004-1506.md): Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar allow remote attackers to inject arbitrary web script via (1) view\_entry. (no CVSS)
- [CVE-2004-1507](https://cve.now/CVE-2004-1507.md): CRLF injection vulnerability in login.php in WebCalendar allows remote attackers to inject CRLF sequences via the return\_path parameter and (no CVSS)
- [CVE-2004-1508](https://cve.now/CVE-2004-1508.md): init.php in WebCalendar allows remote attackers to execute arbitrary local PHP scripts via the user\_inc parameter. (no CVSS)
- [CVE-2004-1509](https://cve.now/CVE-2004-1509.md): validate.php in WebCalendar allows remote attackers to gain sensitive information via an invalid encoded\_login parameter, which reveals the (no CVSS)
- [CVE-2004-1510](https://cve.now/CVE-2004-1510.md): WebCalendar allows remote attackers to gain privileges by modifying critical parameters to (1) view\_entry.php or (2) upcoming.php. (no CVSS)
- [CVE-2004-1511](https://cve.now/CVE-2004-1511.md): Hotfoon 4.0 does not notify users before opening links in web browsers, which could allow remote attackers to execute arbitrary code via a c (no CVSS)
- [CVE-2004-1512](https://cve.now/CVE-2004-1512.md): Cross-site scripting (XSS) vulnerability in Response\_default.html in 04WebServer 1.42 allows remote attackers to execute arbitrary web scrip (no CVSS)
- [CVE-2004-1513](https://cve.now/CVE-2004-1513.md): 04WebServer 1.42 does not adequately filter data that is written to log files, which could allow remote attackers to inject carriage return (no CVSS)
- [CVE-2004-1514](https://cve.now/CVE-2004-1514.md): 04WebServer 1.42 allows remote attackers to cause a denial of service (fail to restart properly) via an HTTP request for an MS-DOS device na (no CVSS)
- [CVE-2004-1515](https://cve.now/CVE-2004-1515.md): SQL injection vulnerability in (1) ttlast.php and (2) last10.php in vBulletin 3.0.x allows remote attackers to execute arbitrary SQL stateme (no CVSS)
- [CVE-2004-1516](https://cve.now/CVE-2004-1516.md): CRLF injection vulnerability in index.php in phpWebSite 0.9.3-4 allows remote attackers to perform HTTP Response Splitting attacks to modify (no CVSS)
- [CVE-2004-1517](https://cve.now/CVE-2004-1517.md): Zone Labs IMsecure and IMsecure Pro before 1.5 allow remote attackers to bypass Active Link Filtering via an instant message containing a UR (no CVSS)
- [CVE-2004-1518](https://cve.now/CVE-2004-1518.md): SQL injection vulnerability in follow.php in Phorum 5.0.12 and earlier allows remote authenticated users to execute arbitrary SQL command vi (no CVSS)
- [CVE-2004-1519](https://cve.now/CVE-2004-1519.md): SQL injection vulnerability in bug.php in phpBugTracker 0.9.1 allows remote attackers to execute arbitrary SQL commands via (1) the bug\_id p (no CVSS)
- [CVE-2004-1520](https://cve.now/CVE-2004-1520.md): Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a long IMAP DELETE comman (no CVSS)
- [CVE-2004-1521](https://cve.now/CVE-2004-1521.md): Eudora 6.2.0.14 does not issue a warning when a user forwards an e-mail message that contains base64 or quoted-printable encoded attachments (no CVSS)
- [CVE-2004-1522](https://cve.now/CVE-2004-1522.md): Format string vulnerability in Army Men RTS 1.0 allows remote attackers to cause a denial of service (application crash) via a nickname that (no CVSS)
- [CVE-2004-1523](https://cve.now/CVE-2004-1523.md): Format string vulnerability in the game console in Hired Team: Trial 2.0 and earlier and 2.200 allows remote attackers to cause a denial of (no CVSS)
- [CVE-2004-1524](https://cve.now/CVE-2004-1524.md): Hired Team: Trial 2.0 and earlier and 2.200 allows remote attackers to cause a denial of service (game interruption) via a malformed UDP pac (no CVSS)
- [CVE-2004-1525](https://cve.now/CVE-2004-1525.md): Hired Team: Trial 2.0 and earlier and 2.200 allows remote attackers to cause a denial of service (application crash) via the status command. (no CVSS)
- [CVE-2004-1526](https://cve.now/CVE-2004-1526.md): Hired Team: Trial 2.0 and earlier and 2.200 does not limit how game players can kick other players off the server, including the administrat (no CVSS)
- [CVE-2004-1527](https://cve.now/CVE-2004-1527.md): Microsoft Internet Explorer 6.0 SP1 does not properly handle certain character strings in the Path attribute, which can cause it to modify c (no CVSS)
- [CVE-2004-1528](https://cve.now/CVE-2004-1528.md): The Event Calendar module 2.13 for PHP-Nuke allows remote attackers to gain sensitive information via an HTTP request to (1) config.php, (2) (no CVSS)
- [CVE-2004-1529](https://cve.now/CVE-2004-1529.md): Cross-site scripting (XSS) vulnerability in the Event Calendar module 2.13 for PHP-Nuke allows remote attackers to execute arbitrary web scr (no CVSS)
- [CVE-2004-1530](https://cve.now/CVE-2004-1530.md): SQL injection vulnerability in the Event Calendar module 2.13 for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2004-1531](https://cve.now/CVE-2004-1531.md): SQL injection vulnerability in post.php in Invision Power Board (IPB) 2.0.0 through 2.0.2 allows remote attackers to execute arbitrary SQL c (no CVSS)
- [CVE-2004-1532](https://cve.now/CVE-2004-1532.md): AppServ 2.5.x and earlier installs a default username and password, which allows remote attackers to gain access. (no CVSS)
- [CVE-2004-1533](https://cve.now/CVE-2004-1533.md): Buffer overflow in pop3svr.exe for DMS POP3 1.5.3.27 and earlier allows remote attackers to cause a denial of service (service crash) via a (no CVSS)
- [CVE-2004-1534](https://cve.now/CVE-2004-1534.md): ZoneAlarm and ZoneAlarm Pro before 5.5.062, with ad-blocking enabled, allows remote web sites to cause a denial of service (application inst (no CVSS)
- [CVE-2004-1535](https://cve.now/CVE-2004-1535.md): PHP remote file inclusion vulnerability in admin\_cash.php for the Cash Mod module for phpBB allows remote attackers to execute arbitrary PHP (no CVSS)
- [CVE-2004-1536](https://cve.now/CVE-2004-1536.md): SQL injection vulnerability in index.php in the ibProArcade module for Invision Power Board (IPB) 1.x and 2.x allows remote attackers to exe (no CVSS)
- [CVE-2004-1537](https://cve.now/CVE-2004-1537.md): Cross-site scripting (XSS) vulnerability in popup.php in PHPKIT 1.6.03 through 1.6.1 allows remote attackers to execute arbitrary web script (no CVSS)
- [CVE-2004-1538](https://cve.now/CVE-2004-1538.md): SQL injection vulnerability in include.php in PHPKIT 1.6.03 through 1.6.1 allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2004-1539](https://cve.now/CVE-2004-1539.md): Halo: Combat Evolved 1.05 and earlier allows remote game servers to cause a denial of service (client crash) via a long value in a game serv (no CVSS)
- [CVE-2004-1540](https://cve.now/CVE-2004-1540.md): ZyXEL Prestige 623, 650, and 652 HW Routers, and possibly other versions, with HTTP Remote Administration enabled, does not require a passwo (no CVSS)
- [CVE-2004-1541](https://cve.now/CVE-2004-1541.md): SecureCRT 4.0, 4.1, and possibly other versions, allows remote attackers to execute arbitrary commands via a telnet:// URL that uses the /F (no CVSS)
- [CVE-2004-1542](https://cve.now/CVE-2004-1542.md): Buffer overflow in Soldier of Fortune II 1.03 Gold and earlier allows remote attackers to cause a denial of service (server or client crash) (no CVSS)
- [CVE-2004-1543](https://cve.now/CVE-2004-1543.md): Directory traversal vulnerability in viewimg.php in KorWeblog 1.6.2-cvs and earlier allows remote attackers to list arbitrary directories vi (no CVSS)
- [CVE-2004-1544](https://cve.now/CVE-2004-1544.md): Cross-site scripting (XSS) vulnerability in Search.jsp in JSPWiki 2.1.120-cvs and earlier allows remote attackers to execute arbitrary web s (no CVSS)
- [CVE-2005-0470](https://cve.now/CVE-2005-0470.md): Buffer overflow in wpa\_supplicant before 0.2.7 allows remote attackers to cause a denial of service (segmentation fault) via invalid EAPOL-K (no CVSS)
- [CVE-2005-0471](https://cve.now/CVE-2005-0471.md): Sun Java JRE 1.1.x through 1.4.x writes temporary files with long filenames that become predictable on a file system that uses 8.3 style sho (no CVSS)
- [CVE-2005-0472](https://cve.now/CVE-2005-0472.md): Gaim before 1.1.3 allows remote attackers to cause a denial of service (infinite loop) via malformed SNAC packets from (1) AIM or (2) ICQ. (no CVSS)
- [CVE-2005-0473](https://cve.now/CVE-2005-0473.md): The HTML parsing functions in Gaim before 1.1.3 allow remote attackers to cause a denial of service (application crash) via malformed HTML t (no CVSS)
- [CVE-2005-0474](https://cve.now/CVE-2005-0474.md): SQL injection vulnerability in the user\_valid\_crypt function in user.php in WebCalendar 0.9.45 allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2005-0475](https://cve.now/CVE-2005-0475.md): SQL injection vulnerability in paFAQ Beta4, and possibly other versions, allows remote attackers to execute arbitrary SQL code via the (1) o (no CVSS)
- [CVE-2005-0476](https://cve.now/CVE-2005-0476.md): Cross-site scripting (XSS) vulnerability in hpm\_guestbook.cgi allows remote attackers to inject arbitrary web script or HTML by posting a me (no CVSS)
- [CVE-2005-0477](https://cve.now/CVE-2005-0477.md): Cross-site scripting (XSS) vulnerability in the SML code for Invision Power Board 1.3.1 FINAL allows remote attackers to inject arbitrary we (no CVSS)
- [CVE-2005-0478](https://cve.now/CVE-2005-0478.md): Multiple buffer overflows in TrackerCam 5.12 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary (no CVSS)
- [CVE-2005-0479](https://cve.now/CVE-2005-0479.md): Directory traversal vulnerability in ComGetLogFile.php3 for TrackerCam 5.12 and earlier allows remote attackers to read arbitrary files via (no CVSS)
- [CVE-2005-0480](https://cve.now/CVE-2005-0480.md): Cross-site scripting (XSS) vulnerability in TrackerCam 5.12 and earlier allows remote attackers to inject arbitrary HTML or web script via t (no CVSS)
- [CVE-2005-0481](https://cve.now/CVE-2005-0481.md): TrackerCam 5.12 and earlier allows remote attackers to read log files via the fn parameter in a direct request to the ComGetLogFile.php3 scr (no CVSS)
- [CVE-2005-0482](https://cve.now/CVE-2005-0482.md): TrackerCam 5.12 and earlier allows remote attackers to cause a denial of service (crash) via (1) a large number of connections with a negati (no CVSS)
- [CVE-2005-0483](https://cve.now/CVE-2005-0483.md): Multiple directory traversal vulnerabilities in sitenfo.sh, sitezipchk.sh, and siteziplist.sh in Glftpd 1.26 to 2.00 allow remote authentica (no CVSS)
- [CVE-2005-0484](https://cve.now/CVE-2005-0484.md): Format string vulnerability in gprostats for GProFTPD before 8.1.9 may allow remote attackers to execute arbitrary code via an FTP transfer (no CVSS)
- [CVE-2005-0485](https://cve.now/CVE-2005-0485.md): Cross-site scripting (XSS) vulnerability in comment.php for paNews 2.0b4 for PHP Arena allows remote attackers to inject arbitrary HTML and (no CVSS)
- [CVE-2005-0486](https://cve.now/CVE-2005-0486.md): Tarantella Secure Global Desktop Enterprise Edition 4.00 and 3.42, and Tarantella Enterprise 3 3.40 and 3.30, when using RSA SecurID and mul (no CVSS)
- [CVE-2005-0487](https://cve.now/CVE-2005-0487.md): Cross-site scripting (XSS) vulnerability in index.php for Kayako ESupport 2.3.1, and possibly other versions, allows remote attackers to inj (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-02-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.