# CVEs published 2005-05-19

48 CVEs were published on May 19, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2000-1224](https://cve.now/CVE-2000-1224.md): Caucho Technology Resin 1.2 and possibly earlier allows remote attackers to view JSP source via an HTTP request to a .jsp file with certain (no CVSS)
- [CVE-2002-1662](https://cve.now/CVE-2002-1662.md): Multiple cross-site scripting (XSS) vulnerabilities in Mambo Site Server 4.0.11 allow remote attackers to execute arbitrary script on other (no CVSS)
- [CVE-2002-1663](https://cve.now/CVE-2002-1663.md): The Post\_Method function in method.c for Monkey HTTP Daemon before 0.5.1 allows remote attackers to cause a denial of service (crash) via a (no CVSS)
- [CVE-2003-1203](https://cve.now/CVE-2003-1203.md): Cross-site scripting (XSS) vulnerability in index.php for Mambo Site Server 4.0.10 allows remote attackers to execute script on other client (no CVSS)
- [CVE-2003-1204](https://cve.now/CVE-2003-1204.md): Multiple cross-site scripting (XSS) vulnerabilities in Mambo Site Server 4.0.12 BETA and earlier allow remote attackers to execute script on (no CVSS)
- [CVE-2003-1205](https://cve.now/CVE-2003-1205.md): Crob FTP Server 2.60.1 allows remote authenticated users to cause a denial of service (crash) by renaming a file to the "con" MS-DOS device (no CVSS)
- [CVE-2003-1206](https://cve.now/CVE-2003-1206.md): Format string vulnerability in Crob FTP Server 2.60.1 allows remote attackers to cause a denial of service (crash) via "%s" or "%n" sequence (no CVSS)
- [CVE-2003-1207](https://cve.now/CVE-2003-1207.md): Crob FTP Server 3.5.1 allows remote authenticated users to cause a denial of service (crash) via a dir command with a large number of "." ch (no CVSS)
- [CVE-2003-1208](https://cve.now/CVE-2003-1208.md): Multiple buffer overflows in Oracle 9i 9 before 9.2.0.3 allow local users to execute arbitrary code by (1) setting the TIME\_ZONE session par (no CVSS)
- [CVE-2003-1209](https://cve.now/CVE-2003-1209.md): The Post\_Method function in Monkey HTTP Daemon before 0.6.2 allows remote attackers to cause a denial of service (crash) via a POST request (no CVSS)
- [CVE-2003-1210](https://cve.now/CVE-2003-1210.md): Multiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke 5.x through 6.5 allow remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2003-1211](https://cve.now/CVE-2003-1211.md): Cross-site scripting (XSS) vulnerability in search.asp for MaxWebPortal 1.30 and possibly earlier versions allows remote attackers to inject (no CVSS)
- [CVE-2003-1212](https://cve.now/CVE-2003-1212.md): MaxWebPortal 1.30 allows remote attackers to perform unauthorized actions by modifying hidden form fields, such as the (1) news, (2) lock, o (no CVSS)
- [CVE-2003-1213](https://cve.now/CVE-2003-1213.md): The default installation of MaxWebPortal 1.30 stores the portal database under the web document root with insecure access control, which all (no CVSS)
- [CVE-2003-1214](https://cve.now/CVE-2003-1214.md): Unknown vulnerability in the server login for VisualShapers ezContents 2.02 and earlier allows remote attackers to bypass access restriction (no CVSS)
- [CVE-2004-2071](https://cve.now/CVE-2004-2071.md): Macallan Mail Solution 2.8.4.6 (Build 260), and possibly earlier versions, allows remote attackers to bypass authentication in the web inter (no CVSS)
- [CVE-2004-2072](https://cve.now/CVE-2004-2072.md): Cross-site scripting (XSS) vulnerability in index.php for Mambo Open Source 4.6, and possibly earlier versions, allows remote attackers to e (no CVSS)
- [CVE-2004-2073](https://cve.now/CVE-2004-2073.md): Linux-VServer 1.24 allows local users with root privileges on a virtual server to gain access to the filesystem outside the virtual server v (no CVSS)
- [CVE-2004-2074](https://cve.now/CVE-2004-2074.md): Format string vulnerability in Dream FTP 1.02 allows local users to cause a denial of service (crash) via format string specifiers in the (1 (no CVSS)
- [CVE-2004-2075](https://cve.now/CVE-2004-2075.md): Sophos Anti-Virus 3.78 allows remote attackers to cause a denial of service (infinite loop) via a MIME header that is not properly terminate (no CVSS)
- [CVE-2004-2076](https://cve.now/CVE-2004-2076.md): Cross-site scripting (XSS) vulnerability in search.php for Jelsoft vBulletin 3.0.0 RC4 allows remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2004-2077](https://cve.now/CVE-2004-2077.md): Nadeo Game Engine for Nadeo TrackMania and Nadeo Virtual Skipper 3 allows remote attackers to cause a denial of service (server crash) via m (no CVSS)
- [CVE-2004-2078](https://cve.now/CVE-2004-2078.md): Red-M Red-Alert 2.7.5 with software 3.1 build 24 allows remote attackers to cause a denial of service (reboot and loss of logged events) via (no CVSS)
- [CVE-2004-2079](https://cve.now/CVE-2004-2079.md): Red-M Red-Alert 2.7.5 with software 3.1 build 24 binds authentication to IP addresses, which allows remote attackers to bypass authenticatio (no CVSS)
- [CVE-2004-2080](https://cve.now/CVE-2004-2080.md): Red-M Red-Alert 2.7.5 with software 3.1 build 24 converts multiple spaces in a Service Set Identifier (SSID) to a single space, which preven (no CVSS)
- [CVE-2004-2081](https://cve.now/CVE-2004-2081.md): The samiftp.dll library in Sami FTP Server 1.1.3 allows local users to cause a denial of service (pmsystem.exe crash) by issuing (1) a CD co (no CVSS)
- [CVE-2004-2082](https://cve.now/CVE-2004-2082.md): The samiftp.dll library in Sami FTP Server 1.1.3 allows remote authenticated users to cause a denial of service (pmsystem.exe crash) via a G (no CVSS)
- [CVE-2004-2083](https://cve.now/CVE-2004-2083.md): Opera Web Browser 7.0 through 7.23 allows remote attackers to trick users into executing a malicious file by embedding a CLSID in the file n (no CVSS)
- [CVE-2004-2084](https://cve.now/CVE-2004-2084.md): Cross-site scripting (XSS) vulnerability in search.php in JShop E-Commerce Server allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2004-2085](https://cve.now/CVE-2004-2085.md): Multiple cross-site scripting (XSS) vulnerabilities in Brad Fears phpCodeCabinet 0.4 and earlier allow remote attackers to inject arbitrary (no CVSS)
- [CVE-2004-2086](https://cve.now/CVE-2004-2086.md): Stack-based buffer overflow in results.stm for Sambar Server before the 6.0 production release allows remote attackers to cause a denial of (no CVSS)
- [CVE-2004-2087](https://cve.now/CVE-2004-2087.md): Unknown vulnerability in SandSurfer before 1.7.0 allows remote attackers to gain access as a logged-in user. (no CVSS)
- [CVE-2004-2088](https://cve.now/CVE-2004-2088.md): Sophos Anti-Virus 3.78 allows remote attackers to bypass virus scanning by using a qmail generated Delivery Status Notification (DSN) where (no CVSS)
- [CVE-2004-2089](https://cve.now/CVE-2004-2089.md): Matrix FTP Server allows remote attackers to cause a denial of service (crash) by logging in using four spaces as the username and password (no CVSS)
- [CVE-2004-2090](https://cve.now/CVE-2004-2090.md): Microsoft Internet Explorer 5.0.1 through 6.0 allows remote attackers to determine the existence of arbitrary files via the VBScript LoadPic (no CVSS)
- [CVE-2004-2091](https://cve.now/CVE-2004-2091.md): Microsoft Baseline Security Analyzer (MBSA) 1.2 does not correctly identify systems that have been patched but remain vulnerable to exploit (no CVSS)
- [CVE-2004-2092](https://cve.now/CVE-2004-2092.md): eTrust InoculateIT for Linux 6.0 uses insecure permissions for multiple files and directories, including the application's registry and tmp (no CVSS)
- [CVE-2004-2093](https://cve.now/CVE-2004-2093.md): Buffer overflow in the open\_socket\_out function in socket.c for rsync 2.5.7 and earlier allows local users to cause a denial of service (cra (no CVSS)
- [CVE-2005-0040](https://cve.now/CVE-2005-0040.md): Multiple cross-site scripting (XSS) vulnerabilities in DotNetNuke before 3.0.12 allow remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2005-0392](https://cve.now/CVE-2005-0392.md): ppxp does not drop root privileges before opening log files, which allows local users to execute arbitrary commands. (no CVSS)
- [CVE-2005-1260](https://cve.now/CVE-2005-1260.md): bzip2 allows remote attackers to cause a denial of service (hard drive consumption) via a crafted bzip2 file that causes an infinite loop (a (no CVSS)
- [CVE-2005-1454](https://cve.now/CVE-2005-1454.md): SQL injection vulnerability in the radius\_xlat function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote authenticated users (no CVSS)
- [CVE-2005-1455](https://cve.now/CVE-2005-1455.md): Buffer overflow in the sql\_escape\_func function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote attackers to cause a denial (no CVSS)
- [CVE-2005-1670](https://cve.now/CVE-2005-1670.md): Unknown vulnerability in Extreme BlackDiamond 10808 and 8800 switches running ExtremeWare XOS 11.1 before 11.1.3.3, 11.0 before 11.0.2.4, an (no CVSS)
- [CVE-2005-1671](https://cve.now/CVE-2005-1671.md): The Logfile feature in Yahoo! Messenger 5.x through 6.0 can be activated by a YMSGR: URL and writes all output to a single ypager.log file, (no CVSS)
- [CVE-2005-1672](https://cve.now/CVE-2005-1672.md): Multiple cross-site scripting (XSS) vulnerabilities in Help Center Live allow remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2005-1673](https://cve.now/CVE-2005-1673.md): Multiple SQL injection vulnerabilities in Help Center Live allow remote attackers to execute arbitrary SQL commands via the (1) id parameter (no CVSS)
- [CVE-2005-1674](https://cve.now/CVE-2005-1674.md): Cross-Site Request Forgery (CSRF) vulnerability in Help Center Live allows remote attackers to perform actions as the administrator via a li (CVSS 6.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-05-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.