# CVEs published 2005-05-27

43 CVEs were published on May 27, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2003-1215](https://cve.now/CVE-2003-1215.md): SQL injection vulnerability in groupcp.php for phpBB 2.0.6 and earlier allows group moderators to perform unauthorized activities via the sq (no CVSS)
- [CVE-2003-1216](https://cve.now/CVE-2003-1216.md): SQL injection vulnerability in search.php for phpBB 2.0.6 and earlier allows remote attackers to execute arbitrary SQL and gain privileges v (no CVSS)
- [CVE-2004-2094](https://cve.now/CVE-2004-2094.md): Cross-site scripting (XSS) vulnerability in WebcamXP 1.06.945 allows remote attackers to inject arbitrary HTML or web script as other users (no CVSS)
- [CVE-2004-2095](https://cve.now/CVE-2004-2095.md): Honeyd before 0.8 replies to TCP packets with the SYN and RST flags set, which allows remote attackers to identify IP addresses that are bei (no CVSS)
- [CVE-2004-2096](https://cve.now/CVE-2004-2096.md): Cross-site scripting (XSS) vulnerability in Mephistoles httpd 0.6.0 final allows remote attackers to execute arbitrary script as other users (no CVSS)
- [CVE-2004-2097](https://cve.now/CVE-2004-2097.md): Multiple scripts on SuSE Linux 9.0 allow local users to overwrite arbitrary files via a symlink attack on (1) /tmp/fvwm-bug created by fvwm- (no CVSS)
- [CVE-2004-2098](https://cve.now/CVE-2004-2098.md): Cross-site scripting (XSS) vulnerability in the banner engine (TBE) 5.0 allows remote attackers to execute arbitrary script as other users v (no CVSS)
- [CVE-2004-2099](https://cve.now/CVE-2004-2099.md): Buffer overflow in Need for Speed Hot Pursuit 2.0 client (NFSHP2), version 242 and earlier, allows remote attackers (servers) to execute arb (no CVSS)
- [CVE-2004-2100](https://cve.now/CVE-2004-2100.md): GeoHttpServer, when configured to authenticate users, allows remote attackers to bypass authentication and access unauthorized files via a U (no CVSS)
- [CVE-2004-2101](https://cve.now/CVE-2004-2101.md): The sysinfo script in GeoHttpServer allows remote attackers to cause a denial of service (crash) via a long pwd parameter, possibly triggeri (no CVSS)
- [CVE-2004-2102](https://cve.now/CVE-2004-2102.md): Cross-site scripting (XSS) vulnerability in FREESCO 2.05, a modified version of thttpd, allows remote attackers to inject arbitrary web scri (no CVSS)
- [CVE-2004-2103](https://cve.now/CVE-2004-2103.md): Cross-site scripting (XSS) vulnerability in Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to process arbitrary sc (no CVSS)
- [CVE-2004-2104](https://cve.now/CVE-2004-2104.md): Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to obtain sensitive server information, including the internal IP a (no CVSS)
- [CVE-2004-2105](https://cve.now/CVE-2004-2105.md): The webacc servlet in Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to read arbitrary .htt files via a full pathn (no CVSS)
- [CVE-2004-2106](https://cve.now/CVE-2004-2106.md): Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to list directories via a direct request to (1) /com/, (2) /com/nov (no CVSS)
- [CVE-2004-2107](https://cve.now/CVE-2004-2107.md): Finjan SurfinGate 6.0 and 7.0, when running in proxy mode, does not authenticate FHTTP commands on TCP port 3141, which allows remote attack (no CVSS)
- [CVE-2004-2108](https://cve.now/CVE-2004-2108.md): Multiple SQL injection vulnerabilities in QuadComm Q-Shop allow remote attackers to execute arbitrary SQL commands via certain parameters to (no CVSS)
- [CVE-2004-2109](https://cve.now/CVE-2004-2109.md): Multiple cross-site scripting (XSS) vulnerabilities in (1) imagezoom.asp or (2) recommend.asp in Q-Shop allow remote attackers to execute ar (no CVSS)
- [CVE-2004-2110](https://cve.now/CVE-2004-2110.md): SQL injection vulnerability in register.php in Phorum before 3.4.6 allows remote attackers to execute arbitrary SQL commands via the hide\_em (no CVSS)
- [CVE-2004-2111](https://cve.now/CVE-2004-2111.md): Stack-based buffer overflow in the site chmod command in Serv-U FTP Server before 4.2 allows remote attackers to execute arbitrary code via (no CVSS)
- [CVE-2004-2112](https://cve.now/CVE-2004-2112.md): Directory traversal vulnerability in BremsServer 1.2.4 allows remote attackers to read arbitrary files via ".." (dot dot) sequences in the U (no CVSS)
- [CVE-2004-2113](https://cve.now/CVE-2004-2113.md): Cross-site scripting (XSS) vulnerability in BremsServer 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the URL. (no CVSS)
- [CVE-2004-2114](https://cve.now/CVE-2004-2114.md): Stack-based and heap-based buffer overflows in ProxyNow! 2.75 and earlier allow remote attackers to execute arbitrary code via a GET request (no CVSS)
- [CVE-2004-2115](https://cve.now/CVE-2004-2115.md): Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attackers to execute arbitra (no CVSS)
- [CVE-2004-2116](https://cve.now/CVE-2004-2116.md): Directory traversal vulnerability in Tiny Server 1.1 allows remote attackers to read or download arbitrary files via a .. (no CVSS)
- [CVE-2004-2117](https://cve.now/CVE-2004-2117.md): Tiny Server 1.1 allows remote attackers to cause a denial of service (crash) via malformed HTTP requests such as (1) a GET request without t (no CVSS)
- [CVE-2004-2118](https://cve.now/CVE-2004-2118.md): Tiny Server 1.1 allows remote attackers to cause a denial of service (crash) via a GET request with a long filename, possibly due to a buffe (no CVSS)
- [CVE-2004-2119](https://cve.now/CVE-2004-2119.md): Cross-site scripting (XSS) vulnerability in Tiny Server 1.1 allows remote attackers to inject arbitrary web script or HTML via the URL. (no CVSS)
- [CVE-2004-2120](https://cve.now/CVE-2004-2120.md): Reptile Web Server allows remote attackers to cause a denial of service (CPU consumption) via multiple incomplete GET requests without the H (no CVSS)
- [CVE-2004-2121](https://cve.now/CVE-2004-2121.md): Multiple directory traversal vulnerabilities in Borland Web Server (BWS) 1.0b3 and earlier allow remote attackers to read and download arbit (no CVSS)
- [CVE-2004-2122](https://cve.now/CVE-2004-2122.md): Cross-site scripting (XSS) vulnerability in intraforum\_db.cgi in Intra Forum allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2004-2123](https://cve.now/CVE-2004-2123.md): Multiple cross-site scripting (XSS) vulnerabilities in Nextplace.com E-Commerce ASP Engine allow remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2004-2124](https://cve.now/CVE-2004-2124.md): The register\_globals simulation capability in Gallery 1.3.1 through 1.4.1 allows remote attackers to modify the HTTP\_POST\_VARS variable and (no CVSS)
- [CVE-2004-2125](https://cve.now/CVE-2004-2125.md): Buffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions before 3.6.ccb, with application protection off, allows loca (no CVSS)
- [CVE-2004-2126](https://cve.now/CVE-2004-2126.md): The upgrade for BlackICE PC Protection 3.6 and earlier sets insecure permissions for .INI files such as (1) blackice.ini, (2) firewall.ini, (no CVSS)
- [CVE-2004-2127](https://cve.now/CVE-2004-2127.md): Directory traversal vulnerability in Web Blog 1.1 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2004-2128](https://cve.now/CVE-2004-2128.md): Cross-site scripting (XSS) vulnerability in BRS WebWeaver 1.07 allows remote attackers to execute arbitrary script as other users via the qu (no CVSS)
- [CVE-2004-2129](https://cve.now/CVE-2004-2129.md): SurfNOW 2.2 allows remote attackers to cause a denial of service (crash) via a series of long HTTP GET requests, possibly triggering a buffe (no CVSS)
- [CVE-2004-2130](https://cve.now/CVE-2004-2130.md): Multiple cross-site scripting (XSS) vulnerabilities in privmsg.php in phpBB 2.0.6 allow remote attackers to execute arbitrary script or HTML (no CVSS)
- [CVE-2004-2131](https://cve.now/CVE-2004-2131.md): Stack-based buffer overflow in ontape for IBM Informix Dynamic Server (IDS) 9.40.xC3 and earlier allows local users, with DSA privileges, to (no CVSS)
- [CVE-2004-2132](https://cve.now/CVE-2004-2132.md): Directory traversal vulnerability in PJreview\_Neo.cgi in PJ CGI Neo review allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2004-2133](https://cve.now/CVE-2004-2133.md): Certain third-party packages for CVSup 16.1h, such as SuSE Linux, contain untrusted paths in the ELF RPATH fields of certain executables, wh (no CVSS)
- [CVE-2004-2134](https://cve.now/CVE-2004-2134.md): Oracle toplink mapping workBench uses a weak encryption algorithm for passwords, which allows local users to decrypt the passwords. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-05-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.