# CVEs published 2005-03-02

19 CVEs were published on March 2, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2004-0428](https://cve.now/CVE-2004-0428.md): Unknown vulnerability in CoreFoundation in Mac OS X 10.3.3 and Mac OS X 10.3.3 Server, related to "the handling of an environment variable," (no CVSS)
- [CVE-2004-0429](https://cve.now/CVE-2004-0429.md): Unknown vulnerability related to "the handling of large requests" in RAdmin for Apple Mac OS X 10.3.3 and Mac OS X 10.2.8 may allow attacker (no CVSS)
- [CVE-2005-0455](https://cve.now/CVE-2005-0455.md): Stack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in smlparse.cpp for RealNetworks RealPlayer 10.5 (6.0.12.1056 (no CVSS)
- [CVE-2005-0581](https://cve.now/CVE-2005-0581.md): Multiple buffer overflows in Computer Associates (CA) License Client and Server 0.1.0.15 allow remote attackers to execute arbitrary code vi (no CVSS)
- [CVE-2005-0582](https://cve.now/CVE-2005-0582.md): Buffer overflow in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to execute arbitrary code via a long filename in (no CVSS)
- [CVE-2005-0583](https://cve.now/CVE-2005-0583.md): Directory traversal vulnerability in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to create arbitrary files via (no CVSS)
- [CVE-2005-0611](https://cve.now/CVE-2005-0611.md): Heap-based buffer overflow in RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1, allows remote att (no CVSS)
- [CVE-2005-0612](https://cve.now/CVE-2005-0612.md): Cisco IP/VC Videoconferencing System 3510, 3520, 3525 and 3530 contain hard-coded default SNMP community strings, which allows remote attack (no CVSS)
- [CVE-2005-0615](https://cve.now/CVE-2005-0615.md): Multiple SQL injection vulnerabilities in (1) index.php, (2) modules.php, or (3) admin.php in PostNuke 0.760-RC2 allow remote attackers to e (no CVSS)
- [CVE-2005-0616](https://cve.now/CVE-2005-0616.md): Multiple cross-site scripting (XSS) vulnerabilities in the Download module for PostNuke 0.750 and 0.760-RC2 allow remote attackers to inject (no CVSS)
- [CVE-2005-0617](https://cve.now/CVE-2005-0617.md): SQL injection vulnerability in dl-search.php in PostNuke 0.750 and 0.760-RC2 allows remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2005-0618](https://cve.now/CVE-2005-0618.md): The SMTP binding function in Symantec Firewall/VPN Appliance 200/200R firmware after 1.5Z and before 1.68, Gateway Security 360/360R and 460 (no CVSS)
- [CVE-2005-0619](https://cve.now/CVE-2005-0619.md): Einstein 1.0.1 stores sensitive information such as usernames and passwords in plaintext in the registry, which allows local users to gain p (no CVSS)
- [CVE-2005-0620](https://cve.now/CVE-2005-0620.md): Einstein 1.0 stores credit card information in plaintext in the world-readable wallets.dat file, which allows local users to steal the infor (no CVSS)
- [CVE-2005-0621](https://cve.now/CVE-2005-0621.md): Scrapland 1.0 and earlier allows remote attackers to cause a denial of service (server termination) by triggering an error, which is treated (no CVSS)
- [CVE-2005-0622](https://cve.now/CVE-2005-0622.md): RaidenHTTPD 1.1.32, and possibly other versions before 1.1.34, allows remote attackers to view the PHP source code via an HTTP GET request f (no CVSS)
- [CVE-2005-0623](https://cve.now/CVE-2005-0623.md): Buffer overflow in RaidenHTTPD 1.1.32, and possibly other versions before 1.1.34, allows remote attackers to execute arbitrary code via a lo (no CVSS)
- [CVE-2005-0624](https://cve.now/CVE-2005-0624.md): reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions, which allows local users to obtain email (no CVSS)
- [CVE-2005-0625](https://cve.now/CVE-2005-0625.md): reportbug 3.2 includes settings from .reportbugrc in bug reports, which exposes sensitive information such as smtpuser and smtppasswd. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-03-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.