# CVEs published 2005-03-26

46 CVEs were published on March 26, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2002-1619](https://cve.now/CVE-2002-1619.md): Buffer overflow in the FC client for IBM AIX 4.3.x allows remote attackers to cause a denial of service (crash and core dump). (no CVSS)
- [CVE-2002-1620](https://cve.now/CVE-2002-1620.md): Unknown vulnerability in IBM AIX Parallel Systems Support Programs (PSSP) 3.1.1, 3.2, and 3.4 allows remote attackers to read arbitrary file (no CVSS)
- [CVE-2002-1621](https://cve.now/CVE-2002-1621.md): Buffer overflow in the file\_comp function in rcp for IBM AIX 4.3.x and 5.1 allows remote attackers to execute arbitrary code. (no CVSS)
- [CVE-2002-1622](https://cve.now/CVE-2002-1622.md): Buffer overflow in certain RPC routines in IBM AIX 4.3 may allow attackers to execute arbitrary code, related to a "variable data type." (no CVSS)
- [CVE-2002-1623](https://cve.now/CVE-2002-1623.md): The design of the Internet Key Exchange (IKE) protocol, when using Aggressive Mode for shared secret authentication, does not encrypt initia (no CVSS)
- [CVE-2002-1624](https://cve.now/CVE-2002-1624.md): Buffer overflow in Lotus Domino web server before R5.0.10, when logging to DOMLOG.NSF, allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2002-1625](https://cve.now/CVE-2002-1625.md): Macromedia Flash Player 6 does not terminate connections when the user leaves the web page, which allows remote attackers to cause a denial (no CVSS)
- [CVE-2002-1626](https://cve.now/CVE-2002-1626.md): Directory traversal vulnerability in Mike Spice My Calendar before 1.5 allows remote attackers to write arbitrary files via .. (no CVSS)
- [CVE-2002-1627](https://cve.now/CVE-2002-1627.md): Directory traversal vulnerability in quiz.cgi for Mike Spice Quiz Me! before 0.6 allows remote attackers to write arbitrary files via .. (no CVSS)
- [CVE-2002-1628](https://cve.now/CVE-2002-1628.md): Directory traversal vulnerability in vote.cgi for Mike Spice Mike's Vote CGI before 1.3 allows remote attackers to write arbitrary files via (no CVSS)
- [CVE-2002-1629](https://cve.now/CVE-2002-1629.md): Multi-Tech ProxyServer products MTPSR1-100, MTPSR1-120, MTPSR1-202ST, MTPSR2-201, and MTPSR3-200 ship with a null password, which allows rem (no CVSS)
- [CVE-2002-1630](https://cve.now/CVE-2002-1630.md): The sendmail.jsp sample page in Oracle 9i Application Server (9iAS) allows remote attackers to send arbitrary emails. (no CVSS)
- [CVE-2002-1631](https://cve.now/CVE-2002-1631.md): SQL injection vulnerability in the query.xsql sample page in Oracle 9i Application Server (9iAS) allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2002-1632](https://cve.now/CVE-2002-1632.md): Oracle 9i Application Server (9iAS) installs multiple sample pages that allow remote attackers to obtain environment variables and other sen (no CVSS)
- [CVE-2002-1633](https://cve.now/CVE-2002-1633.md): Multiple buffer overflows in QNX 4.25 may allow local users to execute arbitrary code via long command line arguments to (1) sample, (2) ex, (no CVSS)
- [CVE-2004-1771](https://cve.now/CVE-2004-1771.md): Scalable OGo (SOGo) 1.0 allows remote authenticated users to bypass intended permissions and view private appointments of other users. (no CVSS)
- [CVE-2005-0398](https://cve.now/CVE-2005-0398.md): The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service (crash) via malformed ISAKMP packets. (no CVSS)
- [CVE-2005-0759](https://cve.now/CVE-2005-0759.md): ImageMagick before 6.0 allows remote attackers to cause a denial of service (application crash) via a TIFF image with an invalid tag. (no CVSS)
- [CVE-2005-0760](https://cve.now/CVE-2005-0760.md): The TIFF decoder in ImageMagick before 6.0 allows remote attackers to cause a denial of service (crash) via a crafted TIFF file. (no CVSS)
- [CVE-2005-0761](https://cve.now/CVE-2005-0761.md): Unknown vulnerability in ImageMagick before 6.1.8 allows remote attackers to cause a denial of service (application crash) via a crafted PSD (no CVSS)
- [CVE-2005-0762](https://cve.now/CVE-2005-0762.md): Heap-based buffer overflow in the SGI parser in ImageMagick before 6.0 allows remote attackers to execute arbitrary code via a crafted SGI i (no CVSS)
- [CVE-2005-0866](https://cve.now/CVE-2005-0866.md): cdrecord before 4:2.0, when DEBUG is enabled, allows local users to overwrite arbitrary files via a symlink attack on temporary files. (no CVSS)
- [CVE-2005-0867](https://cve.now/CVE-2005-0867.md): Integer overflow in Linux kernel 2.6 allows local users to overwrite kernel memory by writing to a sysfs file. (no CVSS)
- [CVE-2005-0868](https://cve.now/CVE-2005-0868.md): AS/400 Telnet 5250 terminal emulation clients, as implemented by (1) IBM client access, (2) Bosanova, (3) PowerTerm, (4) Mochasoft, and poss (no CVSS)
- [CVE-2005-0869](https://cve.now/CVE-2005-0869.md): phpSysInfo 2.3 allows remote attackers to obtain sensitive information via a direct request to (1) class.OpenBSD.inc.php, (2) class.NetBSD.i (no CVSS)
- [CVE-2005-0870](https://cve.now/CVE-2005-0870.md): Multiple cross-site scripting (XSS) vulnerabilities in phpSysInfo 2.3, when register\_globals is enabled, allow remote attackers to inject ar (no CVSS)
- [CVE-2005-0871](https://cve.now/CVE-2005-0871.md): calendar\_scheduler.php in Topic Calendar 1.0.1 module for phpBB, when running on a Microsoft IIS server, allows remote attackers to obtain s (no CVSS)
- [CVE-2005-0872](https://cve.now/CVE-2005-0872.md): Cross-site scripting (XSS) vulnerability in calendar\_scheduler.php in the Topic Calendar 1.0.1 module for phpBB allows remote attackers to i (no CVSS)
- [CVE-2005-0873](https://cve.now/CVE-2005-0873.md): Multiple cross-site scripting (XSS) vulnerabilities in test.jsp in Oracle Reports Server 10g (9.0.4.3.3) allow remote attackers to inject ar (no CVSS)
- [CVE-2005-0874](https://cve.now/CVE-2005-0874.md): Multiple buffer overflows in the (1) AIM, (2) MSN, (3) RSS, and other plug-ins for Trillian 2.0 allow remote web servers to cause a denial o (no CVSS)
- [CVE-2005-0875](https://cve.now/CVE-2005-0875.md): Multiple buffer overflows in the Yahoo plug-in for Trillian 2.0, 3.0, and 3.1 allow remote web servers to cause a denial of service (applica (no CVSS)
- [CVE-2005-0876](https://cve.now/CVE-2005-0876.md): Off-by-one buffer overflow in Dnsmasq before 2.21 may allow attackers to execute arbitrary code via the DHCP lease file. (no CVSS)
- [CVE-2005-0877](https://cve.now/CVE-2005-0877.md): Dnsmasq before 2.21 allows remote attackers to poison the DNS cache via answers to queries that were not made by Dnsmasq. (no CVSS)
- [CVE-2005-0878](https://cve.now/CVE-2005-0878.md): Cross-site scripting (XSS) vulnerability in MercuryBoard before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2005-0879](https://cve.now/CVE-2005-0879.md): PHP remote file include vulnerability in (1) content.php and (2) index.php for Vortex Portal allows remote attackers to execute arbitrary PH (no CVSS)
- [CVE-2005-0880](https://cve.now/CVE-2005-0880.md): content.php in Vortex Portal allows remote attackers to obtain sensitive information via an invalid act parameter, which leaks the full path (no CVSS)
- [CVE-2005-0881](https://cve.now/CVE-2005-0881.md): Cross-site scripting (XSS) vulnerability in articles.newcomment for Interspire ArticleLive 2005 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2005-0882](https://cve.now/CVE-2005-0882.md): SQL injection vulnerability in admincore.php in BirdBlog before 1.2.0 allows remote attackers to execute arbitrary SQL commands via the (1) (no CVSS)
- [CVE-2005-0883](https://cve.now/CVE-2005-0883.md): Multiple cross-site scripting (XSS) vulnerabilities in base.php for DigitalHive 2.0 allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2005-0884](https://cve.now/CVE-2005-0884.md): DigitalHive 2.0 allows remote attackers to re-install the product by directly accessing the install script. (no CVSS)
- [CVE-2005-0885](https://cve.now/CVE-2005-0885.md): Multiple cross-site scripting (XSS) vulnerabilities in XMB Forum 1.9.1 allow remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2005-0886](https://cve.now/CVE-2005-0886.md): Cross-site scripting (XSS) vulnerability in Invision Power Board 2.0.2 and earlier allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2005-0887](https://cve.now/CVE-2005-0887.md): Eval injection vulnerability in Double Choco Latte before 0.9.4.3 allows remote attackers to execute arbitrary PHP code via the menuAction v (no CVSS)
- [CVE-2005-0888](https://cve.now/CVE-2005-0888.md): Multiple cross-site scripting (XSS) vulnerabilities in functions.inc.php for Double Choco Latte 0.9.4.3 allow remote attackers to inject arb (no CVSS)
- [CVE-2005-0889](https://cve.now/CVE-2005-0889.md): Cross-site scripting (XSS) vulnerability in index.php for Dream4 Koobi CMS 4.2.3 allows remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2005-0890](https://cve.now/CVE-2005-0890.md): SQL injection vulnerability in Dream4 Koobi CMS 4.2.3 allows remote attackers to execute arbitrary SQL commands via the area parameter. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-03-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.