# CVEs published 2005-06-02

17 CVEs were published on June 2, 2005: 0 critical, 1 high. Days are UTC.

- [CVE-2005-1824](https://cve.now/CVE-2005-1824.md): The sql\_escape\_string function in auth/sql.c for the mailutils SQL authentication module does not properly quote the "\\" (backslash) charact (no CVSS)
- [CVE-2005-1825](https://cve.now/CVE-2005-1825.md): Multiple stack-based buffer overflows in the nvd\_exec function in HP Radia Notify Daemon 3.1.2.0 (formerly by Novadigm), and other versions (no CVSS)
- [CVE-2005-1826](https://cve.now/CVE-2005-1826.md): Buffer overflow in HP Radia Notify Daemon 3.1.0.0 (formerly by Novadigm), and other versions including 2.x, 3.x, and 4.x, allows remote atta (no CVSS)
- [CVE-2005-1827](https://cve.now/CVE-2005-1827.md): D-Link DSL-504T allows remote attackers to bypass authentication and gain privileges, such as upgrade firmware, restart the router or restor (no CVSS)
- [CVE-2005-1828](https://cve.now/CVE-2005-1828.md): D-Link DSL-504T stores usernames and passwords in cleartext in the router configuration file, which allows remote attackers to obtain sensit (no CVSS)
- [CVE-2005-1829](https://cve.now/CVE-2005-1829.md): Microsoft Internet Explorer 6 SP2 allows remote attackers to cause a denial of service (infinite loop and application crash) via two embedde (no CVSS)
- [CVE-2005-1830](https://cve.now/CVE-2005-1830.md): The DbgMsg.sys driver in Compuware SoftICE DriverStudio 3.1 and 3.2 allows remote attackers to cause a denial of service (application crash) (no CVSS)
- [CVE-2005-1831](https://cve.now/CVE-2005-1831.md): Sudo 1.6.8p7 on SuSE Linux 9.3, and possibly other Linux distributions, allows local users to gain privileges by using sudo to call su, then (CVSS 8.4)
- [CVE-2005-1832](https://cve.now/CVE-2005-1832.md): Multiple cross-site scripting (XSS) vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 and earlier allow remote attackers to execute arbitra (no CVSS)
- [CVE-2005-1833](https://cve.now/CVE-2005-1833.md): Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 allow remote attackers to execute arbitrary SQL commands via the ( (no CVSS)
- [CVE-2005-1834](https://cve.now/CVE-2005-1834.md): SQL injection vulnerability in login.asp in NEXTWEB (i)Site allows remote attackers to execute arbitrary SQL commands and bypass authenticat (no CVSS)
- [CVE-2005-1835](https://cve.now/CVE-2005-1835.md): NEXTWEB (i)Site stores databases under the web document root with insufficient access control, which allows remote attackers to obtain sensi (no CVSS)
- [CVE-2005-1836](https://cve.now/CVE-2005-1836.md): NEXTWEB (i)Site allows remote attackers to cause a denial of service (error 500) via a crafted HTTP request, possibly involving wildcard req (no CVSS)
- [CVE-2005-1837](https://cve.now/CVE-2005-1837.md): Fortinet firewall running FortiOS 2.x contains a hardcoded username with the password set to the serial number, which allows local users wit (no CVSS)
- [CVE-2005-1838](https://cve.now/CVE-2005-1838.md): Multiple cross-site scripting vulnerabilities in castnewPost.asp in Liberum Help Desk 0.97.3 allow remote attackers to inject arbitrary web (no CVSS)
- [CVE-2005-1839](https://cve.now/CVE-2005-1839.md): Multiple SQL injection vulnerabilities in Doug Luxem Liberum Help Desk 0.97.3 allow remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2005-1840](https://cve.now/CVE-2005-1840.md): Directory traversal vulnerability in class.layout\_phpcms.php in phpCMS 1.2.x before 1.2.1pl2 allows remote attackers to read or include arbi (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-06-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.