# CVEs published 2005-04-19

19 CVEs were published on April 19, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2004-1341](https://cve.now/CVE-2004-1341.md): Cross-site scripting (XSS) vulnerability in info2www before 1.2.2.9 allows remote attackers to inject arbitrary web script or HTML via the a (no CVSS)
- [CVE-2004-1774](https://cve.now/CVE-2004-1774.md): Buffer overflow in the SDO\_CODE\_SIZE procedure of the MD2 package (MDSYS.MD2.SDO\_CODE\_SIZE) in Oracle 10g before 10.1.0.2 Patch 2 allows loc (no CVSS)
- [CVE-2005-0391](https://cve.now/CVE-2005-0391.md): geneweb 4.10 and earlier does not properly check file permissions and content during conversion, which allows attackers to modify arbitrary (no CVSS)
- [CVE-2005-1176](https://cve.now/CVE-2005-1176.md): Race condition in JFS2 on AIX 5.2 and 5.3, when deleting a file while I/O is still occurring for that file, may write data to a different fi (no CVSS)
- [CVE-2005-1177](https://cve.now/CVE-2005-1177.md): Unknown vulnerability in (1) Webmin and (2) Usermin before 1.200 causes Webmin to change permissions and ownership of configuration files, w (no CVSS)
- [CVE-2005-1178](https://cve.now/CVE-2005-1178.md): SQL injection vulnerability in Oracle Forms 10g allows remote attackers to execute arbitrary SQL commands via the Query/Where feature. (no CVSS)
- [CVE-2005-1179](https://cve.now/CVE-2005-1179.md): Unknown vulnerability in Xerox MicroServer Web Server for various WorkCentre products including M35/M45/M55 2.028.11.000 through 2.97.20.032 (no CVSS)
- [CVE-2005-1180](https://cve.now/CVE-2005-1180.md): HTTP Response Splitting vulnerability in the Surveys module in PHP-Nuke 7.6 allows remote attackers to spoof web content and poison web cach (no CVSS)
- [CVE-2005-1181](https://cve.now/CVE-2005-1181.md): NOTE: this issue has been disputed by the vendor. (no CVSS)
- [CVE-2005-1182](https://cve.now/CVE-2005-1182.md): Unknown vulnerability in Incoming Remote Command (iSeries Access for Windows Remote Command service) in IBM OS/400 R510, R520, and R530 allo (no CVSS)
- [CVE-2005-1183](https://cve.now/CVE-2005-1183.md): Cross-site scripting (XSS) vulnerability in mvnForum 1.0 RC4 allows remote attackers to inject arbitrary web script or HTML via the Search p (no CVSS)
- [CVE-2005-1184](https://cve.now/CVE-2005-1184.md): The TCP/IP stack in multiple operating systems allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with (no CVSS)
- [CVE-2005-1185](https://cve.now/CVE-2005-1185.md): Unquoted Windows search path vulnerability in Musicmatch Jukebox 10.00.2047 and earlier allows local users to gain privileges via a maliciou (no CVSS)
- [CVE-2005-1186](https://cve.now/CVE-2005-1186.md): Musicmatch Jukebox 10.00.2047 and earlier adds the musicmatch.com domain to the Trusted Sites zone in Internet Explorer, which allows system (no CVSS)
- [CVE-2005-1187](https://cve.now/CVE-2005-1187.md): Heap-based buffer overflow in WinHex 12.05 SR-14, and possibly other versions, may allow attackers to execute arbitrary code via a long file (no CVSS)
- [CVE-2005-1188](https://cve.now/CVE-2005-1188.md): Cross-site scripting (XSS) vulnerability in comersus\_searchItem.asp in Comersus 3.90 to 4.51 allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2005-1189](https://cve.now/CVE-2005-1189.md): Cross-site scripting (XSS) vulnerability in WebcamXP PRO v2.16.468 and earlier allows remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2005-1190](https://cve.now/CVE-2005-1190.md): WebcamXP PRO v2.16.468 and earlier allows remote attackers to cause a denial of service via a long chat name, which takes up too much displa (no CVSS)
- [CVE-2005-1191](https://cve.now/CVE-2005-1191.md): The Web View DLL (webvw.dll), as used in Windows Explorer on Windows 2000 systems, does not properly filter an apostrophe ("'") in the autho (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-04-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.