# CVEs published 2005-02-26

52 CVEs were published on February 26, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2003-1087](https://cve.now/CVE-2003-1087.md): Unknown vulnerability in diagmond and possibly other applications in HP9000 Series 700/800 running HP-UX B.11.00, B.11.04, B.11.11, and B.11 (no CVSS)
- [CVE-2004-1703](https://cve.now/CVE-2004-1703.md): Fusion News 3.6.1 allows remote attackers to add user accounts, if the administrator is logged in, via a comment that contains an img bbcode (no CVSS)
- [CVE-2004-1704](https://cve.now/CVE-2004-1704.md): WpQuiz 2.60b1 through 2.60b8 allows remote attackers to gain privileges via a direct request to adminrestore.php in the extras directory. (no CVSS)
- [CVE-2004-1705](https://cve.now/CVE-2004-1705.md): Buffer overflow in Citadel/UX 6.23 and earlier allows remote attackers to cause a denial of service via a long username. (no CVSS)
- [CVE-2004-1706](https://cve.now/CVE-2004-1706.md): The U.S. (no CVSS)
- [CVE-2004-1707](https://cve.now/CVE-2004-1707.md): The (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix systems, use a default path to find and execu (no CVSS)
- [CVE-2004-1708](https://cve.now/CVE-2004-1708.md): Webbsyte Chat 0.9.0 allows remote attackers to cause a denial of service (crash) via a large number of connections. (no CVSS)
- [CVE-2004-1709](https://cve.now/CVE-2004-1709.md): Datakey Rainbow iKey2032 USB token, when using the CIP client package, does not encrypt communications between the token and the driver, whi (no CVSS)
- [CVE-2004-1710](https://cve.now/CVE-2004-1710.md): page.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the url parameter. (no CVSS)
- [CVE-2004-1711](https://cve.now/CVE-2004-1711.md): Cross-site scripting (XSS) vulnerability in post.php in Moodle before 1.3 allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2004-1712](https://cve.now/CVE-2004-1712.md): Cross-site scripting (XSS) vulnerability in TypePad allows remote attackers to inject arbitrary Javascript via the name parameter. (no CVSS)
- [CVE-2004-1713](https://cve.now/CVE-2004-1713.md): Unknown vulnerability in HP Process Resource Manager (PRM) C.02.01\[.01\] and earlier, as used by HP-UX Workload Manager (WLM), allows local u (no CVSS)
- [CVE-2004-1714](https://cve.now/CVE-2004-1714.md): BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.ini with Everyone Ful (no CVSS)
- [CVE-2004-1715](https://cve.now/CVE-2004-1715.md): Directory traversal vulnerability in MIMEsweeper for Web before 5.0.4 allows remote attackers or local users to read arbitrary files via ".. (no CVSS)
- [CVE-2004-1716](https://cve.now/CVE-2004-1716.md): Cross-site scripting (XSS) vulnerability in PForum before 1.26 allows remote attackers to inject arbitrary web script or HTML via the (1) IR (no CVSS)
- [CVE-2004-1717](https://cve.now/CVE-2004-1717.md): Multiple buffer overflows in the psscan function in ps.c for gv (ghostview) allow remote attackers to execute arbitrary code via a Postscrip (no CVSS)
- [CVE-2004-1718](https://cve.now/CVE-2004-1718.md): The ZwOpenSection function in Integrity Protection Driver (IPD) 1.4 and earlier allows local users to cause a denial of service (crash) via (no CVSS)
- [CVE-2004-1719](https://cve.now/CVE-2004-1719.md): Multiple cross-site scripting (XSS) vulnerabilities in Merak Webmail Server 5.2.7 allow remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2004-1720](https://cve.now/CVE-2004-1720.md): The (1) address.html and possibly (2) calendar.html pages in Merak Mail Server 5.2.7 allow remote attackers to gain sensitive information vi (no CVSS)
- [CVE-2004-1721](https://cve.now/CVE-2004-1721.md): The (1) function.php or (2) function.view.php scripts in Merak Mail Server 5.2.7 allow remote attackers to read arbitrary PHP files via a di (no CVSS)
- [CVE-2004-1722](https://cve.now/CVE-2004-1722.md): SQL injection vulnerability in calendar.html in Merak Mail Server 5.2.7 allows remote attackers to execute arbitrary SQL statements via the (no CVSS)
- [CVE-2004-1723](https://cve.now/CVE-2004-1723.md): The (1) updateuser.php and (2) forums\_prune.php scripts in PHP-Fusion 4.00 allow remote attackers to obtain sensitive information via a dire (no CVSS)
- [CVE-2004-1724](https://cve.now/CVE-2004-1724.md): The ReadMe First.txt file in PHP-Fusion 4.0 instructs users to set the permissions on the fusion\_admin/db\_backups directory to world read/wr (no CVSS)
- [CVE-2004-1725](https://cve.now/CVE-2004-1725.md): Stack-based buffer overflow in xvbmp.c in XV allows remote attackers to execute arbitrary code via a crafted image file. (no CVSS)
- [CVE-2004-1726](https://cve.now/CVE-2004-1726.md): Multiple integer overflows in (1) xviris.c, (2) xvpcx.c, and (3) xvpm.c in XV allow remote attackers to execute arbitrary code via a crafted (no CVSS)
- [CVE-2004-1727](https://cve.now/CVE-2004-1727.md): BadBlue 2.5 allows remote attackers to cause a denial of service (refuse HTTP connections) via a large number of connections from the same I (no CVSS)
- [CVE-2004-1728](https://cve.now/CVE-2004-1728.md): Buffer overflow in British National Corpus SARA (sarad) allows remote attackers to execute arbitrary code by calling the client with a long (no CVSS)
- [CVE-2004-1729](https://cve.now/CVE-2004-1729.md): Cross-site scripting (XSS) vulnerability in Nihuo Web Log Analyzer 1.6 allows remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2004-1730](https://cve.now/CVE-2004-1730.md): Cross-site scripting (XSS) vulnerability in Mantis bugtracker allows remote attackers to inject arbitrary web script or HTML via (1) the ret (no CVSS)
- [CVE-2004-1731](https://cve.now/CVE-2004-1731.md): signup\_page.php in Mantis bugtracker allows remote attackers to send e-mail bombs by creating multiple users and providing the same e-mail a (no CVSS)
- [CVE-2004-1732](https://cve.now/CVE-2004-1732.md): SQL injection vulnerability in out.ViewFolder.php in MyDMS before 1.4.2 allows remote attackers to execute arbitrary SQL commands via the fo (no CVSS)
- [CVE-2004-1733](https://cve.now/CVE-2004-1733.md): Directory traversal vulnerability in MyDMS 1.4.2 and other versions allows remote registered users to read arbitrary files via .. (no CVSS)
- [CVE-2004-1734](https://cve.now/CVE-2004-1734.md): PHP remote file inclusion vulnerability in Mantis 0.19.0a allows remote attackers to execute arbitrary PHP code by modifying the (1) t\_core\_ (no CVSS)
- [CVE-2004-1735](https://cve.now/CVE-2004-1735.md): Cross-site scripting (XSS) vulnerability in the create list option in Sympa 4.1.x and earlier allows remote authenticated users to inject ar (no CVSS)
- [CVE-2004-1736](https://cve.now/CVE-2004-1736.md): Cacti 0.8.5a allows remote attackers to gain sensitive information via an HTTP request to (1) auth.php, (2) auth\_login.php, (3) auth\_changep (no CVSS)
- [CVE-2004-1737](https://cve.now/CVE-2004-1737.md): SQL injection vulnerability in auth\_login.php in Cacti 0.8.5a allows remote attackers to execute arbitrary SQL commands and bypass authentic (no CVSS)
- [CVE-2004-1738](https://cve.now/CVE-2004-1738.md): Cross-site scripting (XSS) vulnerability in page.php in JShop allows remote attackers to inject arbitrary web script or HTML via the xPage p (no CVSS)
- [CVE-2004-1739](https://cve.now/CVE-2004-1739.md): Bird Chat 1.61 allows remote attackers to cause a denial of service (crash) via invalid users. (no CVSS)
- [CVE-2004-1740](https://cve.now/CVE-2004-1740.md): Music daemon (musicd) 0.0.3 and earlier allows remote attackers to read arbitrary files by calling LOAD with a full pathname, then calling S (no CVSS)
- [CVE-2004-1741](https://cve.now/CVE-2004-1741.md): Music daemon (musicd) 0.0.3 and earlier allows remote attackers to cause a denial of service (crash) by calling LOAD with a binary file as a (no CVSS)
- [CVE-2004-1742](https://cve.now/CVE-2004-1742.md): Directory traversal vulnerability in WebAPP 0.9.9 allows remote attackers to view arbitrary files via a .. (no CVSS)
- [CVE-2004-1743](https://cve.now/CVE-2004-1743.md): Easy File Sharing (EFS) Webserver 1.25 allows remote attackers to view arbitrary files via an HTTP request for the disk\_c virtual folder. (no CVSS)
- [CVE-2004-1744](https://cve.now/CVE-2004-1744.md): Easy File Sharing (EFS) Webserver 1.25 allows remote attackers to cause a denial of service (CPU consumption or crash) via many large HTTP r (no CVSS)
- [CVE-2004-1745](https://cve.now/CVE-2004-1745.md): Buffer overflow in Painkiller 1.3.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary (no CVSS)
- [CVE-2004-1746](https://cve.now/CVE-2004-1746.md): Cross-site scripting (XSS) vulnerability in index.php in PHP Code Snippet Library allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2004-1747](https://cve.now/CVE-2004-1747.md): Cross-site scripting (XSS) vulnerability in NetworkEverywhere NR041 running firmware 1.2 Release 03 allows remote attackers to inject arbitr (no CVSS)
- [CVE-2004-1748](https://cve.now/CVE-2004-1748.md): NtRegmon before 6.12 allows local users to cause a denial of service (crash), while NtRegmon is running, via invalid pointers to hook functi (no CVSS)
- [CVE-2004-1749](https://cve.now/CVE-2004-1749.md): Attack Mitigator IPS 5500 3.11.008, and possibly other versions, when configured in a one-armed routing configuration, allows remote attacke (no CVSS)
- [CVE-2004-1750](https://cve.now/CVE-2004-1750.md): RealVNC 4.0 and earlier allows remote attackers to cause a denial of service (crash) via a large number of connections to port 5900. (no CVSS)
- [CVE-2004-1751](https://cve.now/CVE-2004-1751.md): Ground Control II: Operation Exodus 1.0.0.7 and earlier allows remote servers to cause a denial of service (client or server crash) via a la (no CVSS)
- [CVE-2004-1752](https://cve.now/CVE-2004-1752.md): Stack-based buffer overflow in Gaucho 1.4 Build 145 allows remote attackers to execute arbitrary code via a POP3 email with a long Content-T (no CVSS)
- [CVE-2004-1753](https://cve.now/CVE-2004-1753.md): The Apple Java plugin, as used in Netscape 7.1 and 7.2, Mozilla 1.7.2, and Firefox 0.9.3 on MacOS X 10.3.5, when tabbed browsing is enabled, (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-02-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.