# CVEs published 2005-02-23

16 CVEs were published on February 23, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2003-1086](https://cve.now/CVE-2003-1086.md): PHP remote file inclusion vulnerability in pm/lib.inc.php in pMachine Free and pMachine Pro 2.2 and 2.2.1 allows remote attackers to execute (no CVSS)
- [CVE-2004-0465](https://cve.now/CVE-2004-0465.md): Directory traversal vulnerability in jretest.html in WebConnect 6.5 and 6.4.4, and possibly earlier versions, allows remote attackers to rea (no CVSS)
- [CVE-2004-0466](https://cve.now/CVE-2004-0466.md): WebConnect 6.5, 6.4.4, and possibly earlier versions allows remote attackers to cause a denial of service (hang) via a URL containing an MS- (no CVSS)
- [CVE-2005-0511](https://cve.now/CVE-2005-0511.md): misc.php for vBulletin 3.0.6 and earlier, when "Add Template Name in HTML Comments" is enabled, allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2005-0512](https://cve.now/CVE-2005-0512.md): PHP remote file inclusion vulnerability in Tar.php in Mambo 4.5.2 allows remote attackers to execute arbitrary PHP code by modifying the mos (no CVSS)
- [CVE-2005-0513](https://cve.now/CVE-2005-0513.md): PHP remote file inclusion vulnerability in mail\_autocheck.php in the Email This Entry add-on for pMachine Pro 2.4, and possibly other versio (no CVSS)
- [CVE-2005-0514](https://cve.now/CVE-2005-0514.md): Cross-site scripting (XSS) vulnerability in Verity Ultraseek before 5.3.3 allows remote attackers to inject arbitrary HTML and web script vi (no CVSS)
- [CVE-2005-0516](https://cve.now/CVE-2005-0516.md): The ImageGalleryPlugin (ImageGalleryPlugin.pm) in Twiki allows remote attackers to execute arbitrary commands via certain commands that gene (no CVSS)
- [CVE-2005-0517](https://cve.now/CVE-2005-0517.md): PeerFTP\_5 stores sensitive information such as passwords in plaintext in the PeerFTP.ini files, which allows local users to gain privileges. (no CVSS)
- [CVE-2005-0518](https://cve.now/CVE-2005-0518.md): eXeem 0.21 stores sensitive information such as passwords in plaintext in the Exeem registry key, which allows local users to gain privilege (no CVSS)
- [CVE-2005-0519](https://cve.now/CVE-2005-0519.md): ArGoSoft FTP Server before 1.4.2.7 allows remote attackers to read arbitrary files by uploading a ZIP file containing a shortcut (.LNK) file (no CVSS)
- [CVE-2005-0520](https://cve.now/CVE-2005-0520.md): ArGoSoft FTP Server before 1.4.2.8 allows remote attackers to read arbitrary files via shortcut (.LNK) files in the SITE COPY command, a dif (no CVSS)
- [CVE-2005-0521](https://cve.now/CVE-2005-0521.md): SendLink 1.5 stores sensitive information, possibly including passwords, in plaintext in the data.eat file, which allows local users to gain (no CVSS)
- [CVE-2005-0522](https://cve.now/CVE-2005-0522.md): Chat Anywhere 2.72a stores sensitive information such as passwords in plaintext in the .INI file for a chatroom, which allows local users to (no CVSS)
- [CVE-2005-0523](https://cve.now/CVE-2005-0523.md): Format string vulnerability in ProZilla 1.3.7.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers i (no CVSS)
- [CVE-2005-0526](https://cve.now/CVE-2005-0526.md): Multiple cross-site scripting (XSS) vulnerabilities in PBLang 4.65 allow remote attackers to inject arbitrary web script or HTML via (1) the (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-02-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.