# CVEs published 2005-03-08

18 CVEs were published on March 8, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-0098](https://cve.now/CVE-2005-0098.md): Multiple buffer overflows in the SDL port of abuse (abuse-SDL) before 2.00 allow local users to execute arbitrary code via the command line. (no CVSS)
- [CVE-2005-0099](https://cve.now/CVE-2005-0099.md): The SDL port of abuse (abuse-SDL) before 2.00 does not properly drop privileges before creating certain files, which allows local users to c (no CVSS)
- [CVE-2005-0109](https://cve.now/CVE-2005-0109.md): Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local (no CVSS)
- [CVE-2005-0353](https://cve.now/CVE-2005-0353.md): Buffer overflow in the Sentinel LM (Lservnt) service in the Sentinel License Manager 7.2.0.2 allows remote attackers to execute arbitrary co (no CVSS)
- [CVE-2005-0664](https://cve.now/CVE-2005-0664.md): Buffer overflow in the EXIF library (libexif) 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers (no CVSS)
- [CVE-2005-0685](https://cve.now/CVE-2005-0685.md): Multiple access validation errors in OutStart Participate Enterprise (PE) allow remote attackers to (1) browse arbitrary directory trees by (no CVSS)
- [CVE-2005-0686](https://cve.now/CVE-2005-0686.md): Integer overflow in mlterm 2.5.0 through 2.9.1, with gdk-pixbuf support enabled, allows remote attackers to execute arbitrary code via a lar (no CVSS)
- [CVE-2005-0687](https://cve.now/CVE-2005-0687.md): Format string vulnerability in Hashcash 1.16 allows remote attackers to cause a denial of service (memory consumption) and possibly execute (no CVSS)
- [CVE-2005-0688](https://cve.now/CVE-2005-0688.md): Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service (CPU consumption) via (no CVSS)
- [CVE-2005-0689](https://cve.now/CVE-2005-0689.md): includer.cgi in The Includer allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the URL or (2) the templa (no CVSS)
- [CVE-2005-0690](https://cve.now/CVE-2005-0690.md): Gene6 FTP Server does not properly restrict access to the control console, which allows local users to modify the server configuration and g (no CVSS)
- [CVE-2005-0691](https://cve.now/CVE-2005-0691.md): PHP remote file inclusion vulnerability in article mode for modules.php in SocialMPN allows remote attackers to execute arbitrary PHP code b (no CVSS)
- [CVE-2005-0692](https://cve.now/CVE-2005-0692.md): Cross-site scripting (XSS) vulnerability in fusion\_core.php for PHP-Fusion 5.x allows remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2005-0693](https://cve.now/CVE-2005-0693.md): Buffer overflow in JoWood Chaser 1.50 and earlier allows remote attackers to cause a denial of service (client or server crash) and execute (no CVSS)
- [CVE-2005-0694](https://cve.now/CVE-2005-0694.md): Hosting Controller 6.1 Hotfix 1.7 and earlier stores log files under the web root, which allows remote attackers to obtain sensitive informa (no CVSS)
- [CVE-2005-0695](https://cve.now/CVE-2005-0695.md): The password recovery feature (forgotpassword.asp) in Hosting Controller 6.1 Hotfix 1.7 and earlier allows remote attackers to determine the (no CVSS)
- [CVE-2005-0696](https://cve.now/CVE-2005-0696.md): Buffer overflow in ArGoSoft FTP Server 1.4.2.8 allows remote authenticated users to execute arbitrary code via a long DELE command. (no CVSS)
- [CVE-2005-0697](https://cve.now/CVE-2005-0697.md): SQL injection vulnerability in the process\_picture function xp\_publish.php in CopperExport 0.2.1 allows remote attackers to execute arbitrar (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-03-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.