# CVEs published 2005-03-22

23 CVEs were published on March 22, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2001-1424](https://cve.now/CVE-2001-1424.md): Alcatel Speed Touch ADSL modem running firmware KHDSAA.108, KHDSAA.132, KHDSBA.133, and KHDSAA.134 has a blank default password, which allow (no CVSS)
- [CVE-2001-1425](https://cve.now/CVE-2001-1425.md): The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.1 (no CVSS)
- [CVE-2001-1426](https://cve.now/CVE-2001-1426.md): Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 has a TFTP server running without a password, which allows (no CVSS)
- [CVE-2001-1427](https://cve.now/CVE-2001-1427.md): Unknown vulnerability in ColdFusion Server 2.0 through 4.5.1 SP2 allows remote attackers to overwrite templates with zero byte files via unk (no CVSS)
- [CVE-2005-0712](https://cve.now/CVE-2005-0712.md): Mac OS X before 10.3.8 users world-writable permissions for certain directories, which may allow local users to gain privileges, possibly vi (no CVSS)
- [CVE-2005-0713](https://cve.now/CVE-2005-0713.md): The Bluetooth Setup Assistant for Mac OS X before 10.3.8 can be launched without a keyboard or Bluetooth device, which allows local users to (no CVSS)
- [CVE-2005-0715](https://cve.now/CVE-2005-0715.md): AFP Server in Mac OS X before 10.3.8 uses insecure permissions for "Drop Boxes," which allows local users to read the contents of a Drop Box (no CVSS)
- [CVE-2005-0716](https://cve.now/CVE-2005-0716.md): Stack-based buffer overflow in the Core Foundation Library in Mac OS X 10.3.5 and 10.3.6, and possibly earlier versions, allows local users (no CVSS)
- [CVE-2005-0764](https://cve.now/CVE-2005-0764.md): Buffer overflow in command.C for rxvt-unicode before 5.3 allows remote attackers to execute arbitrary code via a crafted file containing lon (no CVSS)
- [CVE-2005-0825](https://cve.now/CVE-2005-0825.md): Buffer overflow in LTris before 1.0.10 allows local users to execute arbitrary code via a crafted highscores file. (no CVSS)
- [CVE-2005-0826](https://cve.now/CVE-2005-0826.md): OllyDbg 1.10 and earlier allows remote attackers to cause a denial of service (application crash) via a dynamic link library (DLL) with a lo (no CVSS)
- [CVE-2005-0827](https://cve.now/CVE-2005-0827.md): Viewcat.php in (1) RUNCMS 1.1A, (2) Ciamos 0.9.2 RC1, e-Xoops 1.05 Rev3, and possibly other products based on e-Xoops (exoops), allow remote (no CVSS)
- [CVE-2005-0828](https://cve.now/CVE-2005-0828.md): highlight.php in (1) RUNCMS 1.1A, (2) CIAMOS 0.9.2 RC1, (3) e-Xoops 1.05 Rev3, and possibly other products based on e-Xoops (exoops), allows (no CVSS)
- [CVE-2005-0829](https://cve.now/CVE-2005-0829.md): Cross-site scripting (XSS) vulnerability in setuser.php of the Digitanium addon to PHP-Fusion 5.01 allows remote attackers to inject arbitra (no CVSS)
- [CVE-2005-0830](https://cve.now/CVE-2005-0830.md): Multiple buffer overflows in Xzabite DYNDNSUpdate 0.6.15 and earlier, including the ipcheck function in dyndnsupdate.c, allow remote attacke (no CVSS)
- [CVE-2005-0831](https://cve.now/CVE-2005-0831.md): PHP-Post allows remote attackers to spoof the names of other users by registering with a username containing hex-encoded characters. (no CVSS)
- [CVE-2005-0832](https://cve.now/CVE-2005-0832.md): Cross-site scripting (XSS) vulnerability in PHP-Post before 0.33 allows remote attackers to inject arbitrary web script or HTML via unknown (no CVSS)
- [CVE-2005-0833](https://cve.now/CVE-2005-0833.md): Belkin 54G (F5D7130) wireless router allows remote attackers to access restricted resources by sniffing URIs from UPNP datagrams, then acces (no CVSS)
- [CVE-2005-0834](https://cve.now/CVE-2005-0834.md): Belkin 54G (F5D7130) wireless router enables SNMP by default in a manner that allows remote attackers to obtain sensitive information. (no CVSS)
- [CVE-2005-0835](https://cve.now/CVE-2005-0835.md): The SNMP service in the Belkin 54G (F5D7130) wireless router allows remote attackers to cause a denial of service via unknown vectors. (no CVSS)
- [CVE-2005-0836](https://cve.now/CVE-2005-0836.md): Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2\_06 allows untrusted applications to gain privileges via the va (no CVSS)
- [CVE-2005-0837](https://cve.now/CVE-2005-0837.md): IceCast 2.20 allows remote attackers to bypass the XSL parser and obtain the source for XSL files via a request for a .xsl file with a trail (no CVSS)
- [CVE-2005-0838](https://cve.now/CVE-2005-0838.md): Multiple buffer overflows in the XSL parser for IceCast 2.20 may allow attackers to cause a denial of service and possibly execute arbitrary (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-03-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.