# CVEs published 2005-02-28

15 CVEs were published on February 28, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2004-0944](https://cve.now/CVE-2004-0944.md): The web management interface for Mitel 3300 Integrated Communications Platform (ICP) before 4.2.2.11 generates easily predictable web sessio (no CVSS)
- [CVE-2004-0945](https://cve.now/CVE-2004-0945.md): The web management interface for Mitel 3300 Integrated Communications Platform (ICP) before 4.2.2.11 allows remote authenticated users to ca (no CVSS)
- [CVE-2005-0205](https://cve.now/CVE-2005-0205.md): KPPP 2.1.2 in KDE 3.1.5 and earlier, when setuid root without certain wrappers, does not properly close a privileged file descriptor for a d (no CVSS)
- [CVE-2005-0208](https://cve.now/CVE-2005-0208.md): The HTML parsing functions in Gaim before 1.1.4 allow remote attackers to cause a denial of service (application crash) via malformed HTML t (no CVSS)
- [CVE-2005-0255](https://cve.now/CVE-2005-0255.md): String handling functions in Mozilla 1.7.3, Firefox 1.0, and Thunderbird before 1.0.2, such as the nsTSubstring\_CharT::Replace function, do (no CVSS)
- [CVE-2005-0584](https://cve.now/CVE-2005-0584.md): Firefox before 1.0.1 and Mozilla before 1.7.6, when displaying the HTTP Authentication dialog, do not change the focus to the tab that gener (no CVSS)
- [CVE-2005-0585](https://cve.now/CVE-2005-0585.md): Firefox before 1.0.1 and Mozilla before 1.7.6 truncates long sub-domains or paths for display, which may allow remote malicious web sites to (no CVSS)
- [CVE-2005-0586](https://cve.now/CVE-2005-0586.md): Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to spoof the extensions of files to download via the Content (no CVSS)
- [CVE-2005-0587](https://cve.now/CVE-2005-0587.md): Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to overwrite arbitrary files by tricking the user into downl (no CVSS)
- [CVE-2005-0588](https://cve.now/CVE-2005-0588.md): Firefox before 1.0.1 and Mozilla before 1.7.6 does not restrict xsl:include and xsl:import tags in XSLT stylesheets to the current domain, w (no CVSS)
- [CVE-2005-0589](https://cve.now/CVE-2005-0589.md): The Form Fill feature in Firefox before 1.0.1 allows remote attackers to steal potentially sensitive information via an input control that m (no CVSS)
- [CVE-2005-0590](https://cve.now/CVE-2005-0590.md): The installation confirmation dialog in Firefox before 1.0.1, Thunderbird before 1.0.1, and Mozilla before 1.7.6 allows remote attackers to (no CVSS)
- [CVE-2005-0591](https://cve.now/CVE-2005-0591.md): Firefox before 1.0.1 allows remote attackers to spoof the (1) security and (2) download modal dialog boxes, which could be used to trick use (no CVSS)
- [CVE-2005-0592](https://cve.now/CVE-2005-0592.md): Heap-based buffer overflow in the UTF8ToNewUnicode function for Firefox before 1.0.1 and Mozilla before 1.7.6 might allow remote attackers t (no CVSS)
- [CVE-2005-0593](https://cve.now/CVE-2005-0593.md): Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote attackers to spoof the SSL "secure site" lock icon via (1) a web site that does (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-02-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.