# CVEs published 2005-05-31

19 CVEs were published on May 31, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-0356](https://cve.now/CVE-2005-0356.md): Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attacke (no CVSS)
- [CVE-2005-1770](https://cve.now/CVE-2005-1770.md): Buffer overflow in the Aavmker4 device driver in Avast! Antivirus 4.6 and possibly other versions allows local users to cause a denial of se (no CVSS)
- [CVE-2005-1771](https://cve.now/CVE-2005-1771.md): Unknown vulnerability in HP-UX trusted systems B.11.00 through B.11.23 allows remote attackers to gain unauthorized access, possibly involvi (no CVSS)
- [CVE-2005-1772](https://cve.now/CVE-2005-1772.md): Buffer overflow in the client cd-key hash in Terminator 3: War of the Machines 1.16 and earlier allows remote attackers to cause a denial of (no CVSS)
- [CVE-2005-1773](https://cve.now/CVE-2005-1773.md): Multiple unknown vulnerabilities in L-Soft LISTSERV 14.3, 1.8e, and 1.8d allow remote attackers to execute arbitrary code or cause a denial (no CVSS)
- [CVE-2005-1774](https://cve.now/CVE-2005-1774.md): WEB-DAV Linux File System (davfs2) 0.2.3 does not properly enforce Unix permissions, which allows local users to write arbitrary files on a (no CVSS)
- [CVE-2005-1775](https://cve.now/CVE-2005-1775.md): Terminator 3: War of the Machines 1.16 and earlier allows remote attackers to cause a denial of service (application crash) via a large nick (no CVSS)
- [CVE-2005-1776](https://cve.now/CVE-2005-1776.md): Buffer overflow in the READ\_TCP\_STRING function in game\_message\_functions.cpp in the network plugin for C'Nedra 0.4.0 and earlier allows rem (no CVSS)
- [CVE-2005-1777](https://cve.now/CVE-2005-1777.md): SQL injection vulnerability in readpmsg.php in PostNuke 0.750 allows remote attackers to execute arbitrary SQL commands via the start parame (no CVSS)
- [CVE-2005-1778](https://cve.now/CVE-2005-1778.md): Cross-site scripting (XSS) vulnerability in readpmsg.php in PostNuke 0.750 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2005-1779](https://cve.now/CVE-2005-1779.md): SQL injection vulnerability in password.asp in MaxWebPortal 1.35, 1.36, 2.0, and 20050418 Next allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2005-1780](https://cve.now/CVE-2005-1780.md): SQL injection vulnerability in admin/login.asp in Active News Manager allows remote attackers to execute arbitrary SQL commands via the pass (no CVSS)
- [CVE-2005-1781](https://cve.now/CVE-2005-1781.md): Unknown vulnerability in SMTP authentication for MailEnable allows remote attackers to cause a denial of service (crash). (no CVSS)
- [CVE-2005-1782](https://cve.now/CVE-2005-1782.md): Multiple cross-site scripting (XSS) vulnerabilities in BookReview beta 1.0 allow remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2005-1783](https://cve.now/CVE-2005-1783.md): BookReview beta 1.0 allows remote attackers to obtain the path of the web server via certain parameters to search.htm, possibly due to a sea (no CVSS)
- [CVE-2005-1784](https://cve.now/CVE-2005-1784.md): Hosting Controller 6.1 HotFix 2.0 and earlier allows remote attackers to steal passwords and gain privileges via a modified emailaddress par (no CVSS)
- [CVE-2005-1785](https://cve.now/CVE-2005-1785.md): SQL injection vulnerability in ad/login.asp in ZonGG 1.2 allows remote attackers to execute arbitrary SQL commands via the password paramete (no CVSS)
- [CVE-2005-1786](https://cve.now/CVE-2005-1786.md): SQL injection vulnerability in admin.asp in FunkyASP AD System 1.1 allows remote attackers to execute arbitrary SQL commands and gain privil (no CVSS)
- [CVE-2005-1787](https://cve.now/CVE-2005-1787.md): setup.php in phpStat 1.5 allows remote attackers to bypass authentication and gain administrator privileges by setting the $check variable. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-05-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.