# CVEs published 2005-03-29

45 CVEs were published on March 29, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-0763](https://cve.now/CVE-2005-0763.md): Buffer overflow in Midnight Commander (mc) 4.5.55 and earlier may allow attackers to execute arbitrary code. (no CVSS)
- [CVE-2005-0892](https://cve.now/CVE-2005-0892.md): Buffer overflow in smail 3.2.0.120 allows remote attackers or local users to execute arbitrary code via a long string in the MAIL FROM comma (no CVSS)
- [CVE-2005-0893](https://cve.now/CVE-2005-0893.md): modes.c in smail 3.2.0.120 implements signal handlers with certain unsafe library calls, which may allow attackers to execute arbitrary code (no CVSS)
- [CVE-2005-0894](https://cve.now/CVE-2005-0894.md): OpenmosixCollector and OpenMosixView in OpenMosixView 1.5 allow local users to overwrite or delete arbitrary files via a symlink attack on ( (no CVSS)
- [CVE-2005-0895](https://cve.now/CVE-2005-0895.md): Netcomm 1300NB DSL Modem allows remote attackers to cause a denial of service (device hang) via a large number of ping packets. (no CVSS)
- [CVE-2005-0896](https://cve.now/CVE-2005-0896.md): Multiple cross-site scripting (XSS) vulnerabilities in review.php in phpMyDirectory 10.1.3-rel allow remote attackers to inject arbitrary we (no CVSS)
- [CVE-2005-0897](https://cve.now/CVE-2005-0897.md): PHP remote file inclusion vulnerability in catalog.php in E-Store Kit-2 PayPal Edition allows remote attackers to execute arbitrary PHP code (no CVSS)
- [CVE-2005-0898](https://cve.now/CVE-2005-0898.md): Cross-site scripting (XSS) vulnerability in downloadform.php in E-Store Kit-2 PayPal Edition allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2005-0899](https://cve.now/CVE-2005-0899.md): AS/400 running OS400 5.2 installs and enables LDAP by default, which allows remote authenticated users to obtain OS/400 user profiles by per (no CVSS)
- [CVE-2005-0900](https://cve.now/CVE-2005-0900.md): marks.php in NukeBookmarks 0.6 for PHP-Nuke allows remote attackers to obtain sensitive information via an invalid (1) file or (2) category (no CVSS)
- [CVE-2005-0901](https://cve.now/CVE-2005-0901.md): Multiple cross-site scripting (XSS) vulnerabilities in NukeBookmarks 0.6 for PHP-Nuke allow remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2005-0902](https://cve.now/CVE-2005-0902.md): SQL injection vulnerability in marks.php in NukeBookmarks 0.6 for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2005-0903](https://cve.now/CVE-2005-0903.md): Buffer overflow in QuickTime PictureViewer 6.5.1 allows remote attackers to cause a denial of service (application crash) via a JPEG file wi (no CVSS)
- [CVE-2005-0904](https://cve.now/CVE-2005-0904.md): Remote Desktop in Windows XP SP1 does not verify the "Force shutdown from a remote system" setting, which allows remote attackers to shut do (no CVSS)
- [CVE-2005-0905](https://cve.now/CVE-2005-0905.md): Maxthon 1.2.0 allows remote malicious web sites to obtain potentially sensitive data from the search bar via the m2\_search\_text property. (no CVSS)
- [CVE-2005-0906](https://cve.now/CVE-2005-0906.md): Buffer overflow in a player logging function in the Tincat network library 2.x before 2.0.28, as used in games such as Sacred and The Settle (no CVSS)
- [CVE-2005-0907](https://cve.now/CVE-2005-0907.md): Multiple SQL injection vulnerabilities in Valdersoft Shopping Cart 3.0 allow remote attackers to execute arbitrary SQL commands via (1) the (no CVSS)
- [CVE-2005-0908](https://cve.now/CVE-2005-0908.md): Multiple cross-site scripting (XSS) vulnerabilities in Valdersoft Shopping Cart 3.0 allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2005-0909](https://cve.now/CVE-2005-0909.md): PHP remote file inclusion vulnerability in shoutact.php for TKai's Shoutbox allows remote attackers to execute arbitrary PHP code via the qu (no CVSS)
- [CVE-2005-0910](https://cve.now/CVE-2005-0910.md): Multiple cross-site scripting (XSS) vulnerabilities in exoops allow remote attackers to inject arbitrary web script or HTML via (1) the sort (no CVSS)
- [CVE-2005-0911](https://cve.now/CVE-2005-0911.md): Multiple SQL injection vulnerabilities in exoops may allow remote attackers to execute arbitrary SQL commands via (1) the viewcat parameter (no CVSS)
- [CVE-2005-0912](https://cve.now/CVE-2005-0912.md): Unknown vulnerabilities in deplate before 0.7.2 have unknown impact, possibly involving elements.rb. (no CVSS)
- [CVE-2005-0913](https://cve.now/CVE-2005-0913.md): Unknown vulnerability in the regex\_replace modifier (modifier.regex\_replace.php) in Smarty before 2.6.8 allows attackers to execute arbitrar (no CVSS)
- [CVE-2005-0914](https://cve.now/CVE-2005-0914.md): Multiple cross-site scripting (XSS) vulnerabilities in CPG Dragonfly 9.0.2.0 allow remote attackers to inject arbitrary web script or HTML v (no CVSS)
- [CVE-2005-0915](https://cve.now/CVE-2005-0915.md): Webmasters-Debutants WD Guestbook 2.8 allows remote attackers to bypass authentication and perform certain administrator actions via a direc (no CVSS)
- [CVE-2005-0916](https://cve.now/CVE-2005-0916.md): AIO in the Linux kernel 2.6.11 on the PPC64 or IA64 architectures with CONFIG\_HUGETLB\_PAGE enabled allows local users to cause a denial of s (no CVSS)
- [CVE-2005-0917](https://cve.now/CVE-2005-0917.md): PHP remote file inclusion vulnerability in index\_header.php for EncapsBB 0.3.2\_fixed, and possibly other versions, allows remote attackers t (no CVSS)
- [CVE-2005-0919](https://cve.now/CVE-2005-0919.md): Adventia Chat 3.1 and Server Pro 3.0 allows remote attackers to inject arbitrary web script or HTML into the chat space, which leaves other (no CVSS)
- [CVE-2005-0920](https://cve.now/CVE-2005-0920.md): Multiple SQL injection vulnerabilities in Bugtracker.NET 2.0.1 allow remote attackers to execute arbitrary SQL commands via unknown vectors. (no CVSS)
- [CVE-2005-0921](https://cve.now/CVE-2005-0921.md): Microsoft Outlook 2002 Connector for IBM Lotus Domino 2.0 allows local users to save passwords and login credentials locally, even when pass (no CVSS)
- [CVE-2005-0922](https://cve.now/CVE-2005-0922.md): Unknown vulnerability in the Auto-Protect module in Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and (no CVSS)
- [CVE-2005-0923](https://cve.now/CVE-2005-0923.md): The SmartScan feature in the Auto-Protect module for Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 an (no CVSS)
- [CVE-2005-0924](https://cve.now/CVE-2005-0924.md): Cross-site scripting (XSS) vulnerability in Adventia E-Data 2.0 allows remote attackers to inject arbitrary web script or HTML via a query k (no CVSS)
- [CVE-2005-0925](https://cve.now/CVE-2005-0925.md): Cross-site scripting (XSS) vulnerability in login.asp for Ublog Reload 1.0 through 1.0.4 allows remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2005-0926](https://cve.now/CVE-2005-0926.md): Buffer overflow in Sylpheed before 1.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code vi (no CVSS)
- [CVE-2005-0927](https://cve.now/CVE-2005-0927.md): Unknown vulnerability in subs.pl for WebAPP 0.9.9 through 0.9.9.2 has unknown impact and attack vectors, probably involving shell metacharac (no CVSS)
- [CVE-2005-0928](https://cve.now/CVE-2005-0928.md): Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP Pro 5.x allow remote attackers to inject arbitrary web script or HTML v (no CVSS)
- [CVE-2005-0929](https://cve.now/CVE-2005-0929.md): SQL injection vulnerability in PhotoPost PHP Pro 5.x may allow remote attackers to execute arbitrary SQL commands via (1) the sl parameter t (no CVSS)
- [CVE-2005-0930](https://cve.now/CVE-2005-0930.md): Cross-site scripting (XSS) vulnerability in message.php in Chatness 2.5.1 and earlier allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2005-0931](https://cve.now/CVE-2005-0931.md): PHP remote file inclusion vulnerability in The Includer 1.0 and 1.1 allows remote attackers to execute arbitrary PHP code. (no CVSS)
- [CVE-2005-0932](https://cve.now/CVE-2005-0932.md): Multiple SQL injection vulnerabilities in phpCOIN 1.2.1b and earlier allow remote attackers to execute arbitrary SQL commands (1) via the se (no CVSS)
- [CVE-2005-0933](https://cve.now/CVE-2005-0933.md): Directory traversal vulnerability in auxpage.php for phpCOIN 1.2.1b and earlier allows remote attackers to read arbitrary files via the page (no CVSS)
- [CVE-2005-0934](https://cve.now/CVE-2005-0934.md): Multiple cross-site scripting (XSS) vulnerabilities in WackoWiki R4 allow remote attackers to inject arbitrary web script or HTML via unknow (no CVSS)
- [CVE-2005-0935](https://cve.now/CVE-2005-0935.md): Multiple SQL injection vulnerabilities in ESMI PayPal Storefront allow remote attackers to execute arbitrary SQL commands via the (1) idpage (no CVSS)
- [CVE-2005-0936](https://cve.now/CVE-2005-0936.md): Cross-site scripting vulnerability in products1h.php in ESMI PayPal Storefront allows remote attackers to inject arbitrary web script or HTM (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-03-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.