# CVEs published 2005-02-25

7 CVEs were published on February 25, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2004-0838](https://cve.now/CVE-2004-0838.md): Lexar Safe Guard for JumpDrive Secure 1.0 stores the password insecurely in memory using XOR encryption, which allows local users to read th (no CVSS)
- [CVE-2005-0107](https://cve.now/CVE-2005-0107.md): bsmtpd 2.3 and earlier does not properly sanitize e-mail addresses, which allows remote attackers to execute arbitrary commands. (no CVSS)
- [CVE-2005-0256](https://cve.now/CVE-2005-0256.md): The wu\_fnmatch function in wu\_fnmatch.c in wu-ftpd 2.6.1 and 2.6.2 allows remote attackers to cause a denial of service (CPU exhaustion by r (no CVSS)
- [CVE-2005-0527](https://cve.now/CVE-2005-0527.md): Firefox 1.0 allows remote attackers to execute arbitrary code via plugins that load "privileged content" into frames, as demonstrated using (no CVSS)
- [CVE-2005-0545](https://cve.now/CVE-2005-0545.md): Microsoft Windows XP Pro SP2 and Windows 2000 Server SP4 running Active Directory allow local users to bypass group policies that restrict a (no CVSS)
- [CVE-2005-0546](https://cve.now/CVE-2005-0546.md): Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary code via (1) an off-by-one error in the imap (no CVSS)
- [CVE-2005-0547](https://cve.now/CVE-2005-0547.md): Unknown vulnerability in ftpd on HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23 allows remote authenticated users to gain "unauthoriz (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-02-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.