# CVEs published 2005-04-26

33 CVEs were published on April 26, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2004-1077](https://cve.now/CVE-2004-1077.md): Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and MetaFrame Presentation Server client for WinCE before 8.33 allows rem (no CVSS)
- [CVE-2004-1078](https://cve.now/CVE-2004-1078.md): Stack-based buffer overflow in the client for Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and Citrix MetaFrame Presen (no CVSS)
- [CVE-2005-0684](https://cve.now/CVE-2005-0684.md): Multiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via (1) an HTTP (no CVSS)
- [CVE-2005-1274](https://cve.now/CVE-2005-1274.md): Stack-based buffer overflow in the getIfHeader function in the WebDAV functionality in MySQL MaxDB before 7.5.00.26 allows remote attackers (no CVSS)
- [CVE-2005-1275](https://cve.now/CVE-2005-1275.md): Heap-based buffer overflow in the ReadPNMImage function in pnm.c for ImageMagick 6.2.1 and earlier allows remote attackers to cause a denial (no CVSS)
- [CVE-2005-1278](https://cve.now/CVE-2005-1278.md): The isis\_print function, as called by isoclns\_print, in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infi (no CVSS)
- [CVE-2005-1279](https://cve.now/CVE-2005-1279.md): tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted (1) BGP packet, which is not pr (no CVSS)
- [CVE-2005-1280](https://cve.now/CVE-2005-1280.md): The rsvp\_print function in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted RSVP (no CVSS)
- [CVE-2005-1281](https://cve.now/CVE-2005-1281.md): Ethereal 0.10.10 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted RSVP packet of length 4. (no CVSS)
- [CVE-2005-1282](https://cve.now/CVE-2005-1282.md): Multiple cross-site scripting (XSS) vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2005-1283](https://cve.now/CVE-2005-1283.md): Multiple directory traversal vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote authenticated users to (1) read arbitrary file (no CVSS)
- [CVE-2005-1284](https://cve.now/CVE-2005-1284.md): The addnew script in Argosoft Mail Server Pro 1.8.7.6 allows remote attackers to create arbitrary accounts, even if "Allow Creation of Accou (no CVSS)
- [CVE-2005-1285](https://cve.now/CVE-2005-1285.md): Cross-site scripting (XSS) vulnerability in thread.php in WoltLab Burning Board 2.3.1 and earlier allows remote attackers to inject arbitrar (no CVSS)
- [CVE-2005-1286](https://cve.now/CVE-2005-1286.md): Unquoted Windows search path vulnerability in BitDefender 8 allows local users to prevent BitDefender from starting by creating a malicious (no CVSS)
- [CVE-2005-1287](https://cve.now/CVE-2005-1287.md): Multiple SQL injection vulnerabilities in BK Forum 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to (no CVSS)
- [CVE-2005-1288](https://cve.now/CVE-2005-1288.md): inc\_login\_check.asp ACS Blog 0.8 through 1.1.3 allows remote attackers to gain administrator privileges via the "in" value in a cookie. (no CVSS)
- [CVE-2005-1289](https://cve.now/CVE-2005-1289.md): index.cgi in E-Cart 2004 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) art and p (no CVSS)
- [CVE-2005-1290](https://cve.now/CVE-2005-1290.md): Multiple cross-site scripting (XSS) vulnerabilities in phpBB 2.0.14 and earlier allow remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2005-1291](https://cve.now/CVE-2005-1291.md): Multiple SQL injection vulnerabilities in CartWIZ ASP Cart allow remote attackers to execute arbitrary SQL commands via the idProduct parame (no CVSS)
- [CVE-2005-1292](https://cve.now/CVE-2005-1292.md): Multiple cross-site scripting (XSS) vulnerabilities in CartWIZ ASP Cart allow remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2005-1293](https://cve.now/CVE-2005-1293.md): Multiple SQL injection vulnerabilities in default.asp in StorePortal 2.63 allow remote attackers to execute arbitrary SQL commands via the ( (no CVSS)
- [CVE-2005-1294](https://cve.now/CVE-2005-1294.md): The affix\_sock\_register in the Affix Bluetooth Protocol Stack for Linux might allow local users to gain privileges via a socket call with a (no CVSS)
- [CVE-2005-1295](https://cve.now/CVE-2005-1295.md): include.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument. (no CVSS)
- [CVE-2005-1296](https://cve.now/CVE-2005-1296.md): include.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument. (no CVSS)
- [CVE-2005-1297](https://cve.now/CVE-2005-1297.md): Cross-site scripting (XSS) vulnerability in the include.cgi script allows remote attackers to inject arbitrary web script or HTML via the ar (no CVSS)
- [CVE-2005-1298](https://cve.now/CVE-2005-1298.md): The inserter.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument. (no CVSS)
- [CVE-2005-1299](https://cve.now/CVE-2005-1299.md): The inserter.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument. (no CVSS)
- [CVE-2005-1300](https://cve.now/CVE-2005-1300.md): Cross-site scripting (XSS) vulnerability in the inserter.cgi script allows remote attackers to inject arbitrary web script or HTML via the a (no CVSS)
- [CVE-2005-1301](https://cve.now/CVE-2005-1301.md): nProtect:Netizen 2005.3.17.1 does not properly verify that the update module is downloaded from an authorized site, which allows remote mali (no CVSS)
- [CVE-2005-1302](https://cve.now/CVE-2005-1302.md): SQL injection vulnerability in Confixx 3.08 and earlier allows remote attackers to execute arbitrary SQL commands via the "change user" fiel (no CVSS)
- [CVE-2005-1303](https://cve.now/CVE-2005-1303.md): The citat.pl script allows remote attackers to read arbitrary files via a full pathname in the argument. (no CVSS)
- [CVE-2005-1304](https://cve.now/CVE-2005-1304.md): The citat.pl script allows remote attackers to execute arbitrary files via shell metacharacters in the argument. (no CVSS)
- [CVE-2005-1305](https://cve.now/CVE-2005-1305.md): The hyper.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-04-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.