# CVEs published 2005-04-12

44 CVEs were published on April 12, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-0390](https://cve.now/CVE-2005-0390.md): Buffer overflow in the HTTP redirection capability in conn.c for Axel before 1.0b may allow remote attackers to execute arbitrary code. (no CVSS)
- [CVE-2005-0941](https://cve.now/CVE-2005-0941.md): The StgCompObjStream::Load function in OpenOffice.org OpenOffice 1.1.4 and earlier allocates memory based on 16 bit length values, but proce (no CVSS)
- [CVE-2005-1018](https://cve.now/CVE-2005-1018.md): Buffer overflow in the UniversalAgent for Computer Associates (CA) BrightStor ARCserve Backup allows remote authenticated users to cause a d (no CVSS)
- [CVE-2005-1041](https://cve.now/CVE-2005-1041.md): The fib\_seq\_start function in fib\_hash.c in Linux kernel allows local users to cause a denial of service (system crash) via /proc/net/route. (no CVSS)
- [CVE-2005-1042](https://cve.now/CVE-2005-1042.md): Integer overflow in the exif\_process\_IFD\_TAG function in exif.c in PHP before 4.3.11 may allow remote attackers to execute arbitrary code vi (no CVSS)
- [CVE-2005-1043](https://cve.now/CVE-2005-1043.md): exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory consumption and crash) via an EXIF header with a la (no CVSS)
- [CVE-2005-1045](https://cve.now/CVE-2005-1045.md): OpenText FirstClass 8.0 client does not properly sanitize strings before passing them to the Windows ShellExecute API, which allows remote a (no CVSS)
- [CVE-2005-1046](https://cve.now/CVE-2005-1046.md): Buffer overflow in the kimgio library for KDE 3.4.0 allows remote attackers to execute arbitrary code via a crafted PCX image file. (no CVSS)
- [CVE-2005-1047](https://cve.now/CVE-2005-1047.md): Meilad File upload script (up.php) mod for phpBB 2.0.x does not properly limit the types of files that can be uploaded, which allows remote (no CVSS)
- [CVE-2005-1048](https://cve.now/CVE-2005-1048.md): SQL injection vulnerability in modules.php in PostNuke 0.760 RC3 allows remote attackers to execute arbitrary SQL statements via the sid par (no CVSS)
- [CVE-2005-1049](https://cve.now/CVE-2005-1049.md): Multiple cross-site scripting vulnerabilities in PostNuke 0.760-RC3 allow remote attackers to inject arbitrary web script or HTML via the (1 (no CVSS)
- [CVE-2005-1050](https://cve.now/CVE-2005-1050.md): The modload op in the Reviews module for PostNuke 0.760-RC3 allows remote attackers to obtain sensitive information via an invalid id parame (no CVSS)
- [CVE-2005-1051](https://cve.now/CVE-2005-1051.md): SQL injection vulnerability in profile.php in PunBB 1.2.4 allows remote authenticated users to execute arbitrary SQL commands via the id par (no CVSS)
- [CVE-2005-1052](https://cve.now/CVE-2005-1052.md): Microsoft Outlook 2003 and Outlook Web Access (OWA) 2003 do not properly display comma separated addresses in the From field in an e-mail me (no CVSS)
- [CVE-2005-1053](https://cve.now/CVE-2005-1053.md): Multiple cross-site scripting (XSS) vulnerabilities in orderwiz.php in ModernBill 4.3.0 and earlier allow remote attackers to inject arbitra (no CVSS)
- [CVE-2005-1054](https://cve.now/CVE-2005-1054.md): PHP remote file inclusion vulnerability in news.php in ModernBill 4.3.0 and earlier allows remote attackers to execute arbitrary PHP code by (no CVSS)
- [CVE-2005-1055](https://cve.now/CVE-2005-1055.md): TowerBlog 0.6 and earlier stores the login data file under the web root, which allows remote attackers to obtain the MD5 checksums of the us (no CVSS)
- [CVE-2005-1056](https://cve.now/CVE-2005-1056.md): Unknown vulnerability in HP OpenView Network Node Manager (NMM) 6.2 through 6.4, and 7.01 through 7.50, allows remote attackers to cause a d (no CVSS)
- [CVE-2005-1057](https://cve.now/CVE-2005-1057.md): Cisco IOS 12.2T, 12.3 and 12.3T, when using Easy VPN Server XAUTH version 6 authentication, allows remote attackers to bypass authentication (no CVSS)
- [CVE-2005-1058](https://cve.now/CVE-2005-1058.md): Cisco IOS 12.2T, 12.3 and 12.3T, when processing an ISAKMP profile that specifies XAUTH authentication after Phase 1 negotiation, may not pr (no CVSS)
- [CVE-2005-1059](https://cve.now/CVE-2005-1059.md): Linksys WET11 1.5.4 allows remote attackers to change the password without providing the original password via the data parameter to changep (no CVSS)
- [CVE-2005-1060](https://cve.now/CVE-2005-1060.md): Unknown vulnerability in the TCP/IP functionality (TCPIP.NLM) in Novell Netware 6.x allows remote attackers to cause a denial of service (AB (no CVSS)
- [CVE-2005-1064](https://cve.now/CVE-2005-1064.md): The copy\_symlink function in rsnapshot 1.2.0 and 1.1.x before 1.1.7 changes the ownership of files that a symlink points to rather than the (no CVSS)
- [CVE-2005-1065](https://cve.now/CVE-2005-1065.md): tetex in Novell Linux Desktop 9 allows local users to determine the existence of arbitrary files via a symlink attack in the /var/cache/font (no CVSS)
- [CVE-2005-1066](https://cve.now/CVE-2005-1066.md): Race condition in rpdump in Pine 4.62 and earlier allows local users to overwrite arbitrary files via a symlink attack. (no CVSS)
- [CVE-2005-1067](https://cve.now/CVE-2005-1067.md): Vulnerability in Access\_user Class before 1.75 allows local users to gain access as other users via the password "new". (no CVSS)
- [CVE-2005-1068](https://cve.now/CVE-2005-1068.md): Cross-site scripting (XSS) vulnerability in sCssBoard 1.11 and earlier allows remote attackers to execute arbitrary Javascript via \[url\] tag (no CVSS)
- [CVE-2005-1069](https://cve.now/CVE-2005-1069.md): Unknown vulnerability in sCssBoard 1.11 and earlier has unknown impact, related to "an exploit on the Profile page." (no CVSS)
- [CVE-2005-1070](https://cve.now/CVE-2005-1070.md): SQL injection vulnerability in index.php in Invision Power Board 1.3.1 Final and earlier allows remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2005-1071](https://cve.now/CVE-2005-1071.md): SQL injection vulnerability in banner.inc.php in JPortal Web Portal 2.3.1 allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2005-1072](https://cve.now/CVE-2005-1072.md): Cross-site scripting (XSS) vulnerability in PunBB before 1.2.5 allows remote attackers to inject arbitrary web script or HTML. (no CVSS)
- [CVE-2005-1073](https://cve.now/CVE-2005-1073.md): Directory traversal vulnerability in index.php for RadScripts RadBids Gold 2 allows remote attackers to read arbitrary files via the read pa (no CVSS)
- [CVE-2005-1074](https://cve.now/CVE-2005-1074.md): SQL injection vulnerability in index.php for RadScripts RadBids Gold 2 allows remote attackers to execute arbitrary SQL commands via the mod (no CVSS)
- [CVE-2005-1075](https://cve.now/CVE-2005-1075.md): Multiple cross-site scripting (XSS) vulnerabilities in RadScripts RadBids Gold 2 allow remote attackers to inject arbitrary web script or HT (no CVSS)
- [CVE-2005-1076](https://cve.now/CVE-2005-1076.md): Cross-site scripting (XSS) vulnerability in the discussion board functionality for WebCT Campus Edition 4.1 allows remote attackers to injec (no CVSS)
- [CVE-2005-1077](https://cve.now/CVE-2005-1077.md): Multiple cross-site scripting (XSS) vulnerabilities in XAMPP 1.4.x allow remote attackers to inject arbitrary web script or HTML via (1) cds (no CVSS)
- [CVE-2005-1078](https://cve.now/CVE-2005-1078.md): XAMPP 1.4.x has multiple default or null passwords, which allows attackers to gain privileges. (no CVSS)
- [CVE-2005-1079](https://cve.now/CVE-2005-1079.md): SQL injection vulnerability in index.php for zOOm Media Gallery 2.1.2 allows remote attackers to execute arbitrary SQL commands via the cati (no CVSS)
- [CVE-2005-1080](https://cve.now/CVE-2005-1080.md): Directory traversal vulnerability in the Java Archive Tool (Jar) utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows remote attackers to (no CVSS)
- [CVE-2005-1081](https://cve.now/CVE-2005-1081.md): Cross-site scripting (XSS) vulnerability in view.php in AzDGDatingPlatinum 1.1.0 allows remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2005-1082](https://cve.now/CVE-2005-1082.md): Multiple SQL injection vulnerabilities in AzDGDatingPlatinum 1.1.0 allows remote attackers to execute arbitrary SQL commands via (1) the id (no CVSS)
- [CVE-2005-1083](https://cve.now/CVE-2005-1083.md): index.php in aeDating 3.2 allows remote attackers to include arbitrary files via the skin parameter. (no CVSS)
- [CVE-2005-1084](https://cve.now/CVE-2005-1084.md): SQL injection vulnerability in sdating.php in aeDating 3.2 allows remote attackers to execute arbitrary SQL commands files via the event par (no CVSS)
- [CVE-2005-1085](https://cve.now/CVE-2005-1085.md): Cross-site scripting (XSS) vulnerability in the control panel in aeDating 3.2 allows remote attackers to inject arbitrary web script or HTML (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-04-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.