# CVEs published 2005-04-08

12 CVEs were published on April 8, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-0464](https://cve.now/CVE-2005-0464.md): gr\_osview in SGI IRIX 6.5.22, and possibly other 6.5 versions, does not drop privileges when opening description files while in debug mode, (no CVSS)
- [CVE-2005-0465](https://cve.now/CVE-2005-0465.md): gr\_osview in SGI IRIX does not drop privileges before opening files, which allows local users to overwrite arbitrary files via the -s option (no CVSS)
- [CVE-2005-1008](https://cve.now/CVE-2005-1008.md): Cross-site scripting (XSS) vulnerability in posts.asp for ASP-DEv XM Forum RC3 allows remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2005-1009](https://cve.now/CVE-2005-1009.md): Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow (1) remote attackers to execute arbitrary code via a modified computer name (no CVSS)
- [CVE-2005-1010](https://cve.now/CVE-2005-1010.md): Cross-site scripting (XSS) vulnerability in Comersus Cart 6 allows remote attackers to inject arbitrary web script or HTML via the account u (no CVSS)
- [CVE-2005-1011](https://cve.now/CVE-2005-1011.md): SQL injection vulnerability in content.asp in SiteEnable allows remote attackers to execute arbitrary SQL commands via the sortby parameter. (no CVSS)
- [CVE-2005-1012](https://cve.now/CVE-2005-1012.md): Cross-site scripting (XSS) vulnerability in Iatek SiteEnable allows remote attackers to inject arbitrary web script or HTML via (1) the cont (no CVSS)
- [CVE-2005-1013](https://cve.now/CVE-2005-1013.md): The SMTP service in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to cause a denial of se (no CVSS)
- [CVE-2005-1014](https://cve.now/CVE-2005-1014.md): Buffer overflow in the IMAP service for MailEnable Enterprise 1.04 and earlier and Professional 1.54 allows remote attackers to execute arbi (no CVSS)
- [CVE-2005-1015](https://cve.now/CVE-2005-1015.md): Buffer overflow in MailEnable Imapd (MEIMAP.exe) allows remote attackers to execute arbitrary code via a long LOGIN command. (no CVSS)
- [CVE-2005-1016](https://cve.now/CVE-2005-1016.md): Cross-site scripting (XSS) vulnerability in links\_add\_form.asp for MaxWebPortal 1.33 and earlier allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2005-1017](https://cve.now/CVE-2005-1017.md): SQL injection vulnerability in the Update\_Events function in events\_functions.asp in MaxWebPortal 1.33 and earlier allows remote attackers t (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-04-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.