# CVEs published 2005-03-01

13 CVEs were published on March 1, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-0595](https://cve.now/CVE-2005-0595.md): Buffer overflow in ext.dll in BadBlue 2.55 allows remote attackers to execute arbitrary code via a long mfcisapicommand parameter. (no CVSS)
- [CVE-2005-0596](https://cve.now/CVE-2005-0596.md): PHP 4 (PHP4) allows attackers to cause a denial of service (daemon crash) by using the readfile function on a file whose size is a multiple (no CVSS)
- [CVE-2005-0597](https://cve.now/CVE-2005-0597.md): Cisco devices running Application and Content Networking System (ACNS) 5.0 before 5.0.17.6 and 5.1 before 5.1.11.6 allow remote attackers to (no CVSS)
- [CVE-2005-0598](https://cve.now/CVE-2005-0598.md): The RealServer RealSubscriber on Cisco devices running Application and Content Networking System (ACNS) 5.1 allow remote attackers to cause (no CVSS)
- [CVE-2005-0599](https://cve.now/CVE-2005-0599.md): Cisco devices running Application and Content Networking System (ACNS) 4.x, 5.0, or 5.1 before 5.1.11.6 allow remote attackers to cause a de (no CVSS)
- [CVE-2005-0600](https://cve.now/CVE-2005-0600.md): Cisco devices running Application and Content Networking System (ACNS) 5.0, 5.1 before 5.1.13.7, or 5.2 before 5.2.3.9 allow remote attacker (no CVSS)
- [CVE-2005-0601](https://cve.now/CVE-2005-0601.md): Cisco devices running Application and Content Networking System (ACNS) 4.x, 5.0, 5.1, or 5.2 use a default password when the setup dialog ha (no CVSS)
- [CVE-2005-0602](https://cve.now/CVE-2005-0602.md): Unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files, which may allow local users to gain privilege (no CVSS)
- [CVE-2005-0603](https://cve.now/CVE-2005-0603.md): viewtopic.php in phpBB 2.0.12 and earlier allows remote attackers to obtain sensitive information via a highlight parameter containing inval (no CVSS)
- [CVE-2005-0604](https://cve.now/CVE-2005-0604.md): lnss.exe in GFI Languard Network Security Scanner 5.0 stores the username and password in memory in plaintext, which could allow local admin (no CVSS)
- [CVE-2005-0606](https://cve.now/CVE-2005-0606.md): Cross-site scripting (XSS) vulnerability in settings.inc.php for CubeCart 2.0.0 through 2.0.5, as used in multiple PHP files, allows remote (no CVSS)
- [CVE-2005-0607](https://cve.now/CVE-2005-0607.md): CubeCart 2.0.0 through 2.0.5 allows remote attackers to determine the full path of the server via direct calls without parameters to (1) inf (no CVSS)
- [CVE-2005-0608](https://cve.now/CVE-2005-0608.md): Heap-based buffer overflow in server.cpp for WebMod 0.47 allows remote attackers to cause a denial of service (crash) and execute arbitrary (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-03-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.