# CVEs published 2005-03-07 33 CVEs were published on March 7, 2005: 0 critical, 0 high. Days are UTC. - [CVE-2003-1088](https://cve.now/CVE-2003-1088.md): Cross-site scripting (XSS) vulnerability in index.php for Zorum 3.4 and 3.5 allows remote attackers to inject arbitrary web script or HTML v (no CVSS) - [CVE-2003-1089](https://cve.now/CVE-2003-1089.md): index.php for Zorum 3.4 allows remote attackers to determine the full path of the web root via invalid parameter names, which reveals the pa (no CVSS) - [CVE-2005-0397](https://cve.now/CVE-2005-0397.md): Format string vulnerability in the SetImageInfo function in image.c for ImageMagick before 6.0.2.5 may allow remote attackers to cause a den (no CVSS) - [CVE-2005-0652](https://cve.now/CVE-2005-0652.md): Unknown vulnerability in HP OpenVMS VAX 7.x and 6.x and OpenVMS Alpha 7.x or 6.x allows local users to access privileged files. (no CVSS) - [CVE-2005-0653](https://cve.now/CVE-2005-0653.md): phpMyAdmin 2.6.1 does not properly grant permissions on tables with an underscore in the name, which grants remote authenticated users more (no CVSS) - [CVE-2005-0654](https://cve.now/CVE-2005-0654.md): gifload.exe in GIMP 2.0.5, 2.2.3, and possibly 2.2.4 allows remote attackers or local users to cause a denial of service (application crash) (no CVSS) - [CVE-2005-0655](https://cve.now/CVE-2005-0655.md): auraCMS 1.5 allows remote attackers to obtain sensitive information via an HTTP request with an invalid id parameter to (1) teman.php, (2) h (no CVSS) - [CVE-2005-0656](https://cve.now/CVE-2005-0656.md): Multiple cross-site scripting (XSS) vulnerabilities in auraCMS 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) (no CVSS) - [CVE-2005-0657](https://cve.now/CVE-2005-0657.md): Directory traversal vulnerability in Computalynx CProxy 3.3.x and 3.4.x through 3.4.4 allows remote attackers to read arbitrary files or cau (no CVSS) - [CVE-2005-0658](https://cve.now/CVE-2005-0658.md): SQL injection vulnerability in a third party extension to TYPO3 allows remote attackers to execute arbitrary SQL commands via the category\_u (no CVSS) - [CVE-2005-0659](https://cve.now/CVE-2005-0659.md): phpBB 2.0.13 and earlier allows remote attackers to obtain sensitive information via a direct request to oracle.php, which reveals the path (no CVSS) - [CVE-2005-0660](https://cve.now/CVE-2005-0660.md): Multiple cross-site scripting (XSS) vulnerabilities in D-Forum 1.11 allows remote attackers to inject arbitrary web script or HTML via certa (no CVSS) - [CVE-2005-0661](https://cve.now/CVE-2005-0661.md): SQL injection vulnerability in the getwbbuserdata function in session.php for Woltlab Burning Board 2.0.3 through 2.3.0 allows remote attack (no CVSS) - [CVE-2005-0662](https://cve.now/CVE-2005-0662.md): Cross-site scripting (XSS) vulnerability in index.php for MercuryBoard 1.1.2 allows remote attackers to inject arbitrary web script or HTML (no CVSS) - [CVE-2005-0663](https://cve.now/CVE-2005-0663.md): SQL injection vulnerability in index.php for MercuryBoard 1.1.2 allows remote attackers to inject arbitrary SQL commands via the f parameter (no CVSS) - [CVE-2005-0665](https://cve.now/CVE-2005-0665.md): Format string vulnerability in xv before 3.10a allows remote attackers to execute arbitrary code via format string specifiers in a filename. (no CVSS) - [CVE-2005-0666](https://cve.now/CVE-2005-0666.md): Unknown vulnerability in PaX from the September 2003 release to 2.2 before 2005.03.05, related to SEGMEXEC or RANDEXEC and VMA mirroring, al (no CVSS) - [CVE-2005-0667](https://cve.now/CVE-2005-0667.md): Buffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers to execute arbitrary code via an e-mail mes (no CVSS) - [CVE-2005-0668](https://cve.now/CVE-2005-0668.md): Unknown vulnerability in HTTP Anti Virus Proxy (HAVP) before 0.51 prevents viruses from being properly detected in certain files such as (1) (no CVSS) - [CVE-2005-0669](https://cve.now/CVE-2005-0669.md): Multiple SQL injection vulnerabilities in mod.php for phpCOIN 1.2.0 through 1.2.1b allow remote attackers to execute arbitrary SQL commands (no CVSS) - [CVE-2005-0670](https://cve.now/CVE-2005-0670.md): Cross-site scripting (XSS) vulnerability in phpCOIN 1.2.0 through 1.2.1b allows remote attackers to inject arbitrary web script or HTML via (no CVSS) - [CVE-2005-0671](https://cve.now/CVE-2005-0671.md): Format string vulnerability in Carsten's 3D Engine (Ca3DE), March 2004 version and earlier, allows remote attackers to execute arbitrary cod (no CVSS) - [CVE-2005-0672](https://cve.now/CVE-2005-0672.md): Carsten's 3D Engine (Ca3DE), March 2004 version and earlier, allows remote attackers to execute arbitrary code via text strings that are not (no CVSS) - [CVE-2005-0673](https://cve.now/CVE-2005-0673.md): Cross-site scripting (XSS) vulnerability in usercp\_register.php for phpBB 2.0.13 allows remote attackers to inject arbitrary web script or H (no CVSS) - [CVE-2005-0674](https://cve.now/CVE-2005-0674.md): Cross-site scripting (XSS) vulnerability in the News module for paBox 1.6 allows remote attackers to inject arbitrary web script or HTML via (no CVSS) - [CVE-2005-0675](https://cve.now/CVE-2005-0675.md): Cross-site scripting (XSS) vulnerability in index.php for Zorum 3.5 allows remote attackers to inject arbitrary web script or HTML via the ( (no CVSS) - [CVE-2005-0676](https://cve.now/CVE-2005-0676.md): index.php in Zorum 3.5 allows remote attackers to trigger an SQL error, and possibly inject arbitrary SQL commands, via the search capabilit (no CVSS) - [CVE-2005-0677](https://cve.now/CVE-2005-0677.md): index.php for Zorum 3.5 allows remote attackers to perform certain actions as other users by modifying the id parameter. (no CVSS) - [CVE-2005-0678](https://cve.now/CVE-2005-0678.md): PHP remote file inclusion vulnerability in formmail.inc.php for Form Mail Script 2.3 and earlier allows remote attackers to execute arbitrar (no CVSS) - [CVE-2005-0679](https://cve.now/CVE-2005-0679.md): PHP remote file inclusion vulnerability in tell\_a\_friend.inc.php for Tell A Friend Script 2.7 before 20050305 allows remote attackers to exe (no CVSS) - [CVE-2005-0680](https://cve.now/CVE-2005-0680.md): PHP remote file inclusion vulnerability in download\_center\_lite.inc.php for Download Center Lite 1.6 allows remote attackers to execute arbi (no CVSS) - [CVE-2005-0681](https://cve.now/CVE-2005-0681.md): Nokia Symbian 60 allows remote attackers to cause a denial of service (phone restart) via a Bluetooth nickname. (no CVSS) - [CVE-2005-0682](https://cve.now/CVE-2005-0682.md): Cross-site scripting (XSS) vulnerability in common.inc in Drupal before 4.5.2 allows remote attackers to inject arbitrary web script or HTML (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2005-03-07 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.