# CVEs published 2005-04-13

39 CVEs were published on April 13, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2004-0790](https://cve.now/CVE-2004-0790.md): Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) via spoofed ICMP error (no CVSS)
- [CVE-2004-0791](https://cve.now/CVE-2004-0791.md): Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (network throughput reduction for TCP connectio (no CVSS)
- [CVE-2004-1060](https://cve.now/CVE-2004-1060.md): Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (no CVSS)
- [CVE-2005-0048](https://cve.now/CVE-2005-0048.md): Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Server 2003, and older operating systems allows remote attackers to cause a denial o (no CVSS)
- [CVE-2005-0059](https://cve.now/CVE-2005-0059.md): Buffer overflow in the Message Queuing component of Microsoft Windows 2000 and Windows XP SP1 allows remote attackers to execute arbitrary c (no CVSS)
- [CVE-2005-0060](https://cve.now/CVE-2005-0060.md): Buffer overflow in the font processing component of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local use (no CVSS)
- [CVE-2005-0061](https://cve.now/CVE-2005-0061.md): The kernel of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via certain acce (no CVSS)
- [CVE-2005-0063](https://cve.now/CVE-2005-0063.md): The document processing application used by the Windows Shell in Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote a (no CVSS)
- [CVE-2005-0404](https://cve.now/CVE-2005-0404.md): KMail 1.7.1 in KDE 3.3.2 allows remote attackers to spoof email information, such as whether the email has been digitally signed or encrypte (no CVSS)
- [CVE-2005-0550](https://cve.now/CVE-2005-0550.md): Buffer overflow in Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to cause a denial of service ( (no CVSS)
- [CVE-2005-0551](https://cve.now/CVE-2005-0551.md): Stack-based buffer overflow in WINSRV.DLL in the Client Server Runtime System (CSRSS) process of Microsoft Windows 2000, Windows XP SP1 and (no CVSS)
- [CVE-2005-0553](https://cve.now/CVE-2005-0553.md): Race condition in the memory management routines in the DHTML object processor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote (no CVSS)
- [CVE-2005-0554](https://cve.now/CVE-2005-0554.md): Buffer overflow in the URL processor of Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (c (no CVSS)
- [CVE-2005-0555](https://cve.now/CVE-2005-0555.md): Buffer overflow in the Content Advisor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via (no CVSS)
- [CVE-2005-0558](https://cve.now/CVE-2005-0558.md): Buffer overflow in Microsoft Word 2000, Word 2002, and Word 2003 allows remote attackers to execute arbitrary code via a crafted document. (no CVSS)
- [CVE-2005-0560](https://cve.now/CVE-2005-0560.md): Heap-based buffer overflow in the SvrAppendReceivedChunk function in xlsasink.dll in the SMTP service of Exchange Server 2000 and 2003 allow (no CVSS)
- [CVE-2005-0562](https://cve.now/CVE-2005-0562.md): GIF file validation error in MSN Messenger 6.2 allows remote attackers in a user's contact list to execute arbitrary code via a GIF image wi (no CVSS)
- [CVE-2005-0610](https://cve.now/CVE-2005-0610.md): Multiple symlink vulnerabilities in portupgrade before 20041226\_2 in FreeBSD allow local users to (1) overwrite arbitrary files and possibly (no CVSS)
- [CVE-2005-1086](https://cve.now/CVE-2005-1086.md): Buffer overflow in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to execute arbitrary code via an HTTP request with (no CVSS)
- [CVE-2005-1087](https://cve.now/CVE-2005-1087.md): CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide entries in the logfi (no CVSS)
- [CVE-2005-1088](https://cve.now/CVE-2005-1088.md): Unknown vulnerability in DameWare NT Utilities 4.8 and earlier, and Mini Remote Control 4.8 and earlier, allows local users to gain addition (no CVSS)
- [CVE-2005-1089](https://cve.now/CVE-2005-1089.md): Unknown vulnerability in DC++ before 0.674 allows attackers to append data to arbitrary files. (no CVSS)
- [CVE-2005-1090](https://cve.now/CVE-2005-1090.md): Directory traversal vulnerability in the readFile and writeFile API for Maxthon 1.2.0 and 1.2.1 allows remote attackers to read or write arb (no CVSS)
- [CVE-2005-1091](https://cve.now/CVE-2005-1091.md): Maxthon 1.2.0 and 1.2.1 allows remote attackers to bypass the security ID and use restricted plugin API functions via script that includes t (no CVSS)
- [CVE-2005-1092](https://cve.now/CVE-2005-1092.md): Lightspeed DeluxeFTP 6.01 stores usernames and passwords in plaintext in sites.xml, which is world-readable, which allows local users to gai (no CVSS)
- [CVE-2005-1093](https://cve.now/CVE-2005-1093.md): Buffer overflow in the PopUp Plus 2.0.3.8 plugin for Miranda IM, with "Use SmileyAdd Setting" enabled, allows remote attackers to execute ar (no CVSS)
- [CVE-2005-1094](https://cve.now/CVE-2005-1094.md): FTP Now 2.6.14 stores usernames and passwords in plaintext in sites.xml, which is world-readable, which allows local users to gain privilege (no CVSS)
- [CVE-2005-1095](https://cve.now/CVE-2005-1095.md): Cross-site scripting (XSS) vulnerability in main.asp for Ocean12 Membership Manager Pro 1.x allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2005-1096](https://cve.now/CVE-2005-1096.md): SQL injection vulnerability in main.asp for Ocean12 Membership Manager Pro 1.x allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2005-1097](https://cve.now/CVE-2005-1097.md): Rebrand P2P Share Spy 2.2 stores the user password in plaintext in the txtPassword value in the registry, which allows local users to gain p (no CVSS)
- [CVE-2005-1098](https://cve.now/CVE-2005-1098.md): GetDataBack for NTFS 2.31 stores the username and license key in plaintext in the Name value in the License registry key, which may allow lo (no CVSS)
- [CVE-2005-1099](https://cve.now/CVE-2005-1099.md): Multiple buffer overflows in the HandleChild function in server.c in Greylisting daemon (GLD) 1.3 and 1.4, when GLD is listening on a networ (no CVSS)
- [CVE-2005-1100](https://cve.now/CVE-2005-1100.md): Format string vulnerability in the ErrorLog function in cnf.c in Greylisting daemon (GLD) 1.3 and 1.4 allows remote attackers to execute arb (no CVSS)
- [CVE-2005-1101](https://cve.now/CVE-2005-1101.md): Multiple buffer overflows in Lotus Domino Server 6.0.5 and 6.5.4 allow remote attackers to cause a denial of service (application crash) and (no CVSS)
- [CVE-2005-1102](https://cve.now/CVE-2005-1102.md): Multiple cross-site scripting (XSS) vulnerabilities in template-functions-post.php in WordPress 1.5 and earlier allow remote attackers to ex (no CVSS)
- [CVE-2005-1103](https://cve.now/CVE-2005-1103.md): Sygate Security Agent (SSA) in Sygate Secure Enterprise 3.5 through 4.1 does not prevent the security policy from being updated by unprivile (no CVSS)
- [CVE-2005-1104](https://cve.now/CVE-2005-1104.md): Multiple cross-site scripting (XSS) vulnerabilities in Centra 7 allow remote attackers to inject arbitrary web script or HTML via the (1) us (no CVSS)
- [CVE-2005-1105](https://cve.now/CVE-2005-1105.md): Directory traversal vulnerability in the MimeBodyPart.getFileName method in JavaMail 1.3.2 allows remote attackers to write arbitrary files (no CVSS)
- [CVE-2005-1106](https://cve.now/CVE-2005-1106.md): PictureViewer in QuickTime for Windows 6.5.2 allows remote attackers to cause a denial of service (application crash) via a GIF image with t (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-04-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.