# CVEs published 2005-02-22

9 CVEs were published on February 22, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-0258](https://cve.now/CVE-2005-0258.md): Directory traversal vulnerability in (1) usercp\_register.php and (2) usercp\_avatar.php for phpBB 2.0.11, and possibly other versions, with g (no CVSS)
- [CVE-2005-0259](https://cve.now/CVE-2005-0259.md): phpBB 2.0.11, and possibly other versions, with remote avatars and avatar uploading enabled, allows local users to read arbitrary files by p (no CVSS)
- [CVE-2005-0504](https://cve.now/CVE-2005-0504.md): Buffer overflow in the MoxaDriverIoctl function for the moxa serial driver (moxa.c) in Linux 2.2.x, 2.4.x, and 2.6.x before 2.6.22 allows lo (no CVSS)
- [CVE-2005-0505](https://cve.now/CVE-2005-0505.md): Unknown vulnerability in Information Resource Manager (IRM) before 1.5.2.1 allows remote attackers to have "potentially serious" impact, rel (no CVSS)
- [CVE-2005-0506](https://cve.now/CVE-2005-0506.md): The Avaya IP Office Phone Manager, and other products such as the IP Softphone, stores sensitive data in cleartext in a registry key, which (no CVSS)
- [CVE-2005-0507](https://cve.now/CVE-2005-0507.md): Directory traversal vulnerability in SD Server 4.0.70 and earlier allows remote attackers to read arbitrary files via .. (no CVSS)
- [CVE-2005-0508](https://cve.now/CVE-2005-0508.md): Unknown vulnerability in Squiggle for Batik before 1.5.1 allows attackers to bypass certain access controls via certain features of the Rhin (no CVSS)
- [CVE-2005-0509](https://cve.now/CVE-2005-0509.md): Multiple cross-site scripting (XSS) vulnerabilities in the Mono 1.0.5 implementation of ASP.NET (.Net) allow remote attackers to inject arbi (no CVSS)
- [CVE-2005-0510](https://cve.now/CVE-2005-0510.md): The daemon for fallback-reboot before 0.995 allows attackers to cause a denial of service (daemon exit), possibly related to verbose debug m (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-02-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.
