# CVEs published 2005-04-07

16 CVEs were published on April 7, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-0992](https://cve.now/CVE-2005-0992.md): Cross-site scripting (XSS) vulnerability in index.php in phpMyAdmin before 2.6.2-rc1 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2005-0993](https://cve.now/CVE-2005-0993.md): Buffer overflow in nwprint in SCO OpenServer 5.0.7 allows local users to execute arbitrary code via a long command line argument. (no CVSS)
- [CVE-2005-0994](https://cve.now/CVE-2005-0994.md): Multiple SQL injection vulnerabilities in ProductCart 2.7 allow remote attackers to execute arbitrary SQL commands via (1) the Category or r (no CVSS)
- [CVE-2005-0995](https://cve.now/CVE-2005-0995.md): Multiple cross-site scripting (XSS) vulnerabilities in ProductCart 2.7 allow remote attackers to inject arbitrary web script or HTML via (1) (no CVSS)
- [CVE-2005-0996](https://cve.now/CVE-2005-0996.md): Multiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke 7.6 allow remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2005-0997](https://cve.now/CVE-2005-0997.md): Multiple SQL injection vulnerabilities in the Web\_Links module for PHP-Nuke 7.6 allow remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2005-0998](https://cve.now/CVE-2005-0998.md): The Web\_Links module for PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via an invalid show parameter, which triggers (no CVSS)
- [CVE-2005-0999](https://cve.now/CVE-2005-0999.md): SQL injection vulnerability in the Top module for PHP-Nuke 6.x through 7.6 allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2005-1000](https://cve.now/CVE-2005-1000.md): Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 7.6 allow remote attackers to inject arbitrary web script or HTML via (1) th (no CVSS)
- [CVE-2005-1001](https://cve.now/CVE-2005-1001.md): PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via direct requests to (1) the Surveys module with the file parameter s (no CVSS)
- [CVE-2005-1002](https://cve.now/CVE-2005-1002.md): logwebftbs2000.exe in Logics Software File Transfer (LOG-FT) allows remote attackers to read arbitrary files via modified (1) VAR\_FT\_LANG an (no CVSS)
- [CVE-2005-1003](https://cve.now/CVE-2005-1003.md): Directory traversal vulnerability in index.php for ProfitCode PayProCart 3.0 allows remote attackers to include arbitrary PHP files via .. (no CVSS)
- [CVE-2005-1004](https://cve.now/CVE-2005-1004.md): Cross-site scripting (XSS) vulnerability in usrdetails.php in ProfitCode PayProCart 3.0 allows remote attackers to inject arbitrary web scri (no CVSS)
- [CVE-2005-1005](https://cve.now/CVE-2005-1005.md): ProfitCode PayProCart 3.0 allows remote attackers to bypass authentication and gain administrative privileges to the admin control panel, as (no CVSS)
- [CVE-2005-1006](https://cve.now/CVE-2005-1006.md): Multiple cross-site scripting (XSS) vulnerabilities in SonicWALL SOHO 5.1.7.0 allow remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2005-1007](https://cve.now/CVE-2005-1007.md): Unknown vulnerability in the LIST functionality in CommuniGate Pro before 4.3c3 allows remote attackers to cause a denial of service (server (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-04-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.