# CVEs published 2005-06-01

38 CVEs were published on June 1, 2005: 0 critical, 1 high. Days are UTC.

- [CVE-2004-2135](https://cve.now/CVE-2004-2135.md): cryptoloop on Linux kernel 2.6.x, when used on certain file systems with a block size 1024 or greater, has certain "IV computation" weakness (no CVSS)
- [CVE-2004-2136](https://cve.now/CVE-2004-2136.md): dm-crypt on Linux kernel 2.6.x, when used on certain file systems with a block size 1024 or greater, has certain "IV computation" weaknesses (no CVSS)
- [CVE-2005-1788](https://cve.now/CVE-2005-1788.md): SQL injection vulnerability in resellerresources.asp in Hosting Controller 6.1 Hotfix 2.0 allows remote attackers to execute arbitrary SQL c (no CVSS)
- [CVE-2005-1789](https://cve.now/CVE-2005-1789.md): SQL injection vulnerability in SignIn.asp in India Software Solution shopping cart allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2005-1790](https://cve.now/CVE-2005-1790.md): Microsoft Internet Explorer 6 SP2 6.0.2900.2180 and 6.0.2800.1106, and earlier versions, allows remote attackers to cause a denial of servic (no CVSS)
- [CVE-2005-1791](https://cve.now/CVE-2005-1791.md): Microsoft Internet Explorer 6 SP2 (6.0.2900.2180) crashes when the user attempts to add a URI to the restricted zone, in which the full doma (no CVSS)
- [CVE-2005-1792](https://cve.now/CVE-2005-1792.md): Memory leak in Windows Management Instrumentation (WMI) service allows attackers to cause a denial of service (memory consumption and crash) (no CVSS)
- [CVE-2005-1793](https://cve.now/CVE-2005-1793.md): User32.DLL in Microsoft Windows 98SE, and possibly other operating systems, allows local and remote attackers to cause a denial of service ( (no CVSS)
- [CVE-2005-1794](https://cve.now/CVE-2005-1794.md): Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificat (CVSS 7.4)
- [CVE-2005-1795](https://cve.now/CVE-2005-1795.md): The filecopy function in misc.c in Clam AntiVirus (ClamAV) before 0.85, on Mac OS, allows remote attackers to execute arbitrary code via a v (no CVSS)
- [CVE-2005-1796](https://cve.now/CVE-2005-1796.md): Format string vulnerability in the curses\_msg function in the Ncurses interface (ec\_curses.c) for Ettercap before 0.7.3 allows remote attack (no CVSS)
- [CVE-2005-1797](https://cve.now/CVE-2005-1797.md): The design of Advanced Encryption Standard (AES), aka Rijndael, allows remote attackers to recover AES keys via timing attacks on S-box look (no CVSS)
- [CVE-2005-1798](https://cve.now/CVE-2005-1798.md): Directory traversal vulnerability in ServersCheck Monitoring Software 5.9.0 to 5.10.0 allows remote attackers to read arbitrary files via .. (no CVSS)
- [CVE-2005-1799](https://cve.now/CVE-2005-1799.md): Cross-site scripting (XSS) vulnerability in FreeStyle Wiki 3.5.7 and WikiLite (FSWikiLite) .10 allows remote attackers to inject arbitrary w (no CVSS)
- [CVE-2005-1800](https://cve.now/CVE-2005-1800.md): Cross-site scripting (XSS) vulnerability in Jaws Glossary gadget 0.4 to 0.5.1 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2005-1801](https://cve.now/CVE-2005-1801.md): The vCard viewer in Nokia 9500 allows attackers to cause a denial of service (crash) via a vCard with a long Name field, which causes the cr (no CVSS)
- [CVE-2005-1802](https://cve.now/CVE-2005-1802.md): Nortel VPN Router (aka Contivity) allows remote attackers to cause a denial of service (crash) via an IPsec IKE packet with a malformed ISAK (no CVSS)
- [CVE-2005-1803](https://cve.now/CVE-2005-1803.md): Multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to inject arbitrary web s (no CVSS)
- [CVE-2005-1804](https://cve.now/CVE-2005-1804.md): Multiple SQL injection vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2005-1805](https://cve.now/CVE-2005-1805.md): SQL injection vulnerability in login.asp in an unknown product by Online Solutions for Educators (OS4E) allows remote attackers to execute a (no CVSS)
- [CVE-2005-1806](https://cve.now/CVE-2005-1806.md): Format string vulnerability in PeerCast 0.1211 and earlier allows remote attackers to execute arbitrary code via format strings in the URL. (no CVSS)
- [CVE-2005-1807](https://cve.now/CVE-2005-1807.md): The Data function in class.smtp.php in PHPMailer 1.7.2 and earlier allows remote attackers to cause a denial of service (infinite loop leadi (no CVSS)
- [CVE-2005-1808](https://cve.now/CVE-2005-1808.md): Firefly Studios Stronghold 2 1.2 and earlier allows remote attackers to cause a denial of service (crash) via a packet with a large size val (no CVSS)
- [CVE-2005-1809](https://cve.now/CVE-2005-1809.md): Sony Ericsson P900 Beamer allows remote attackers to cause a denial of service (panic) via an obexftp session with a long filename in an OBE (no CVSS)
- [CVE-2005-1810](https://cve.now/CVE-2005-1810.md): SQL injection vulnerability in template-functions-category.php in WordPress 1.5.1 allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2005-1811](https://cve.now/CVE-2005-1811.md): Cross-site scripting (XSS) vulnerability in usercp.php for MyBulletinBoard (MyBB) allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2005-1812](https://cve.now/CVE-2005-1812.md): Multiple stack-based buffer overflows in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allow remote attackers to execute arbitrary code (no CVSS)
- [CVE-2005-1813](https://cve.now/CVE-2005-1813.md): Directory traversal vulnerability in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allows remote attackers to read arbitrary files via a (no CVSS)
- [CVE-2005-1814](https://cve.now/CVE-2005-1814.md): Stack-based buffer overflow in PicoWebServer 1.0 allows remote attackers to cause a denial of service (application crash) and possibly execu (no CVSS)
- [CVE-2005-1815](https://cve.now/CVE-2005-1815.md): Multiple buffer overflows in Hummingbird Connectivity inetD 10.0.0.1 and 9.0.0.4 allows attackers to cause a denial of service and possibly (no CVSS)
- [CVE-2005-1816](https://cve.now/CVE-2005-1816.md): Invision Power Board (IPB) 1.0 through 2.0.4 allows non-root admins to add themselves or other users to the root admin group via the "Move u (no CVSS)
- [CVE-2005-1817](https://cve.now/CVE-2005-1817.md): Invision Power Board (IPB) 1.0 through 1.3 allows remote attackers to edit arbitrary forum posts via a direct request to index.php with modi (no CVSS)
- [CVE-2005-1818](https://cve.now/CVE-2005-1818.md): Multiple SQL injection vulnerabilities in NewLife Blogger before 3.3.1 allow remote attackers to execute arbitrary SQL commands via unknown (no CVSS)
- [CVE-2005-1819](https://cve.now/CVE-2005-1819.md): Cross-site scripting (XSS) vulnerability in NikoSoft WebMail before 0.11.0 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2005-1820](https://cve.now/CVE-2005-1820.md): zboard.php in Zeroboard version 4.1pl2 to 4.1pl5 allows remote attackers to execute arbitrary PHP code via improper quoting when using the p (no CVSS)
- [CVE-2005-1821](https://cve.now/CVE-2005-1821.md): PHP remote file inclusion vulnerability in pdl\_header.inc.php in PowerDownload 3.0.2 and 3.0.3 allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2005-1822](https://cve.now/CVE-2005-1822.md): Multiple SQL injection vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to execute arbitrary SQL commands via the (1) cat or (no CVSS)
- [CVE-2005-1823](https://cve.now/CVE-2005-1823.md): Multiple cross-site scripting (XSS) vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to inject arbitrary web script or HTML (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-06-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.