# CVEs published 2005-06-07

23 CVEs were published on June 7, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-1864](https://cve.now/CVE-2005-1864.md): PHP remote file inclusion vulnerability in cal\_admintop.php in Calendarix Advanced 1.5 allows remote attackers to execute arbitrary PHP code (no CVSS)
- [CVE-2005-1865](https://cve.now/CVE-2005-1865.md): Multiple SQL injection vulnerabilities in Calendarix Advanced 1.5 allow remote attackers to execute arbitrary SQL commands via the catview p (no CVSS)
- [CVE-2005-1866](https://cve.now/CVE-2005-1866.md): Cross-site scripting (XSS) vulnerability in calendar.php in Calendarix Advanced 1.5 allows remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2005-1867](https://cve.now/CVE-2005-1867.md): Symantec Brightmail AntiSpam before 6.0.2 has a hard-coded database administrator password, which allows remote attackers to gain privileges (no CVSS)
- [CVE-2005-1868](https://cve.now/CVE-2005-1868.md): I-Man 0.9, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code by uploading a file attachment with a .php e (no CVSS)
- [CVE-2005-1869](https://cve.now/CVE-2005-1869.md): PHP remote file inclusion vulnerability in start\_lobby.php in MWChat 6.x allows remote attackers to execute arbitrary PHP code via the CONFI (no CVSS)
- [CVE-2005-1870](https://cve.now/CVE-2005-1870.md): PHP remote file inclusion vulnerability in childwindow.inc.php in Popper 1.41-r2 and earlier allows remote attackers to execute arbitrary PH (no CVSS)
- [CVE-2005-1871](https://cve.now/CVE-2005-1871.md): Unknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public registration is enabled, allows remote attackers to (no CVSS)
- [CVE-2005-1872](https://cve.now/CVE-2005-1872.md): Buffer overflow in the administrative console in IBM WebSphere Application Server 5.x, when the global security option is enabled, allows re (no CVSS)
- [CVE-2005-1873](https://cve.now/CVE-2005-1873.md): Multiple buffer overflows in Crob FTP 3.6.1, and possibly earlier versions, allow remote attackers to execute arbitrary code via (1) an FTP (no CVSS)
- [CVE-2005-1874](https://cve.now/CVE-2005-1874.md): Directory traversal vulnerability in Dzip before 2.9 allows remote attackers to create arbitrary files via a filename containing a .. (no CVSS)
- [CVE-2005-1875](https://cve.now/CVE-2005-1875.md): Multiple SQL injection vulnerabilities in list.php in Exhibit Engine (EE) 1.22 allow remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2005-1876](https://cve.now/CVE-2005-1876.md): Direct code injection vulnerability in CuteNews 1.3.6 and earlier allows remote attackers with administrative privileges to execute arbitrar (CVSS 4.5)
- [CVE-2005-1877](https://cve.now/CVE-2005-1877.md): Cross-site scripting (XSS) vulnerability in view\_ticket.php in Lpanel 1.59 and earlier allows remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2005-1878](https://cve.now/CVE-2005-1878.md): GIPTables Firewall 1.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on the temp.ip.addresses temporary f (no CVSS)
- [CVE-2005-1879](https://cve.now/CVE-2005-1879.md): LutelWall 0.97 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system call (no CVSS)
- [CVE-2005-1880](https://cve.now/CVE-2005-1880.md): everybuddy 0.4.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system ca (no CVSS)
- [CVE-2005-1881](https://cve.now/CVE-2005-1881.md): upload.php in YaPiG 0.92b, 0.93u and 0.94u does not properly restrict the file extension for uploaded image files, which allows remote attac (no CVSS)
- [CVE-2005-1882](https://cve.now/CVE-2005-1882.md): PHP remote file inclusion vulnerability in last\_gallery.php in YaPiG 0.93u and 0.94u allows remote attackers to execute arbitrary PHP code v (no CVSS)
- [CVE-2005-1883](https://cve.now/CVE-2005-1883.md): global.php in YaPiG 0.92b allows remote attackers to include arbitrary local files via the BASE\_DIR parameter. (no CVSS)
- [CVE-2005-1884](https://cve.now/CVE-2005-1884.md): Directory traversal vulnerability in the (1) rmdir or (2) mkdir commands in upload.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attacke (no CVSS)
- [CVE-2005-1885](https://cve.now/CVE-2005-1885.md): view.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to obtain sensitive information via a phid parameter that is not an integer (no CVSS)
- [CVE-2005-1886](https://cve.now/CVE-2005-1886.md): Cross-site scripting (XSS) vulnerability in view.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to inject arbitrary web script (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-06-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.