# CVEs published 2005-05-17

21 CVEs were published on May 17, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-1264](https://cve.now/CVE-2005-1264.md): Raw character devices (raw.c) in the Linux kernel 2.6.x call the wrong function before passing an ioctl to the block device, which crosses s (no CVSS)
- [CVE-2005-1307](https://cve.now/CVE-2005-1307.md): The (1) stopserver.sh and (2) startserver.sh scripts in Adobe Version Cue on Mac OS X uses the current working directory to find and execute (no CVSS)
- [CVE-2005-1589](https://cve.now/CVE-2005-1589.md): The pkt\_ioctl function in the pktcdvd block device ioctl handler (pktcdvd.c) in Linux kernel 2.6.12-rc4 and earlier calls the wrong function (no CVSS)
- [CVE-2005-1626](https://cve.now/CVE-2005-1626.md): Multiple buffer overflows in handlers.c for Pico Server (pServ) before 3.3 may allow attackers to execute arbitrary code. (no CVSS)
- [CVE-2005-1627](https://cve.now/CVE-2005-1627.md): Unknown vulnerability in Viewglob before 2.0.1, related to "a potential security issue with the Viewglob display and ssh X forwarding," has (no CVSS)
- [CVE-2005-1628](https://cve.now/CVE-2005-1628.md): apage.cgi in WebAPP 0.9.9.2.1, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters (no CVSS)
- [CVE-2005-1629](https://cve.now/CVE-2005-1629.md): SQL injection vulnerability in member.php for Photopost PHP Pro allows remote attackers to execute arbitrary SQL commands via the verifykey (no CVSS)
- [CVE-2005-1630](https://cve.now/CVE-2005-1630.md): Unknown vulnerability in Attachment Mod before 2.3.13, related to a "serious issue with realnames," has unknown impact and attack vectors. (no CVSS)
- [CVE-2005-1631](https://cve.now/CVE-2005-1631.md): booby.php in Booby 1.0.0 and earlier allows remote attackers to view private bookmarks by guessing item IDs. (no CVSS)
- [CVE-2005-1632](https://cve.now/CVE-2005-1632.md): Cheetah 0.9.15 and 0.9.16 searches the /tmp directory for modules before using the paths in the PYTHONPATH variable, which allows local user (no CVSS, cheetah)
- [CVE-2005-1633](https://cve.now/CVE-2005-1633.md): Multiple SQL injection vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2005-1634](https://cve.now/CVE-2005-1634.md): Multiple cross-site scripting (XSS) vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2005-1635](https://cve.now/CVE-2005-1635.md): JGS-XA JGS-Portal 3.0.2 and earlier allows remote attackers to obtain the full server path via direct requests to (1) jgs\_portal\_ref.php, (2 (no CVSS)
- [CVE-2005-1636](https://cve.now/CVE-2005-1636.md): mysql\_install\_db in MySQL 4.1.x before 4.1.12 and 5.x up to 5.0.4 creates the mysql\_install\_db.X file with a predictable filename and insecu (no CVSS)
- [CVE-2005-1637](https://cve.now/CVE-2005-1637.md): Multiple SQL injection vulnerabilities in NPDS 4.8 and 5.0 allow remote attackers to execute arbitrary SQL commands via the thold parameter (no CVSS)
- [CVE-2005-1638](https://cve.now/CVE-2005-1638.md): The \_writeAttrs function in SafeHTML before 1.3.2 does not properly handle quotes in attribute values, which could allow remote attackers to (no CVSS)
- [CVE-2005-1639](https://cve.now/CVE-2005-1639.md): SQL injection vulnerability in Sigmaweb.DLL in Sigma ISP Manager 6.6 allows remote attackers to execute arbitrary SQL commands via the (1) u (no CVSS)
- [CVE-2005-1640](https://cve.now/CVE-2005-1640.md): mod\_channel.bas in The Ignition Project ignitionServer 0.3.0 to 0.3.6, and possibly earlier versions, does not properly verify whether a hos (no CVSS)
- [CVE-2005-1641](https://cve.now/CVE-2005-1641.md): mod\_channel in The Ignition Project ignitionServer 0.3.0 to 0.3.6, and possibly earlier versions, does not allow protected operators to acce (no CVSS)
- [CVE-2005-1642](https://cve.now/CVE-2005-1642.md): SQL injection vulnerability in the verify\_email function in Woltlab Burning Board 2.x and earlier allows remote attackers to execute arbitra (no CVSS)
- [CVE-2005-1643](https://cve.now/CVE-2005-1643.md): The ZCom\_BitStream::Deserialize function in Zoidcom 1.0 beta 4 and earlier allows remote attackers to cause a denial of service via a crafte (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-05-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.