# CVEs published 2005-06-14

56 CVEs were published on June 14, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2004-2137](https://cve.now/CVE-2004-2137.md): Outlook Express 6.0, when sending multipart e-mail messages using the "Break apart messages larger than" setting, leaks the BCC recipients o (no CVSS)
- [CVE-2005-0488](https://cve.now/CVE-2005-0488.md): Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers to read sensitive en (no CVSS)
- [CVE-2005-0563](https://cve.now/CVE-2005-0563.md): Cross-site scripting (XSS) vulnerability in Microsoft Outlook Web Access (OWA) component in Exchange Server 5.5 allows remote attackers to i (no CVSS)
- [CVE-2005-0756](https://cve.now/CVE-2005-0756.md): ptrace in Linux kernel 2.6.8.1 does not properly verify addresses on the amd64 platform, which allows local users to cause a denial of servi (no CVSS)
- [CVE-2005-1205](https://cve.now/CVE-2005-1205.md): The Telnet client for Microsoft Windows XP, Windows Server 2003, and Windows Services for UNIX allows remote attackers to read sensitive env (no CVSS)
- [CVE-2005-1212](https://cve.now/CVE-2005-1212.md): Buffer overflow in Microsoft Step-by-Step Interactive Training (orun32.exe) allows remote attackers to execute arbitrary code via a bookmark (no CVSS)
- [CVE-2005-1213](https://cve.now/CVE-2005-1213.md): Stack-based buffer overflow in the news reader for Microsoft Outlook Express (MSOE.DLL) 5.5 SP2, 6, and 6 SP1 allows remote malicious NNTP s (no CVSS)
- [CVE-2005-1214](https://cve.now/CVE-2005-1214.md): Microsoft Agent allows remote attackers to spoof trusted Internet content and execute arbitrary code by disguising security prompts on a mal (no CVSS)
- [CVE-2005-1215](https://cve.now/CVE-2005-1215.md): Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content restriction policies via a malformed HTTP reques (no CVSS)
- [CVE-2005-1216](https://cve.now/CVE-2005-1216.md): Microsoft ISA Server 2000 allows remote attackers to connect to services utilizing the NetBIOS protocol via a NetBIOS connection with an ISA (no CVSS)
- [CVE-2005-1265](https://cve.now/CVE-2005-1265.md): The mmap function in the Linux Kernel 2.6.10 can be used to create memory maps with a start address beyond the end address, which allows loc (no CVSS)
- [CVE-2005-1269](https://cve.now/CVE-2005-1269.md): Gaim before 1.3.1 allows remote attackers to cause a denial of service (application crash) via a Yahoo! message with non-ASCII characters in (no CVSS)
- [CVE-2005-1720](https://cve.now/CVE-2005-1720.md): AFP Server for Mac OS X 10.4.1, when using an ACL enabled volume, does not properly remove an ACL when a file is copied to a directory that (no CVSS)
- [CVE-2005-1721](https://cve.now/CVE-2005-1721.md): Buffer overflow in the legacy client support for AFP Server for Mac OS X 10.4.1 allows attackers to execute arbitrary code. (no CVSS)
- [CVE-2005-1722](https://cve.now/CVE-2005-1722.md): Unknown vulnerability in the CoreGraphics Window Server for Mac OS X 10.4.x up to 10.4.1 allows local users to inject arbitrary commands int (no CVSS)
- [CVE-2005-1723](https://cve.now/CVE-2005-1723.md): LaunchServices in Apple Mac OS X 10.4.x up to 10.4.1 does not properly mark file extensions and MIME types as unsafe if an Apple Uniform Typ (no CVSS)
- [CVE-2005-1724](https://cve.now/CVE-2005-1724.md): NFS on Apple Mac OS X 10.4.x up to 10.4.1 does not properly obey the -network or -mask flags for a filesystem and exports it to everyone, wh (no CVSS)
- [CVE-2005-1725](https://cve.now/CVE-2005-1725.md): launchd 106 in Apple Mac OS X 10.4.x up to 10.4.1 allows local users to overwrite arbitrary files via a symlink attack on the socket file in (no CVSS)
- [CVE-2005-1727](https://cve.now/CVE-2005-1727.md): Apple Mac OS X 10.4.x up to 10.4.1 sets insecure world- and group-writable permissions for the (1) system cache folder and (2) Dashboard sys (no CVSS)
- [CVE-2005-1728](https://cve.now/CVE-2005-1728.md): MCX Client for Apple Mac OS X 10.4.x up to 10.4.1 insecurely logs Portable Home Directory credentials, which allows local users to obtain th (no CVSS)
- [CVE-2005-1760](https://cve.now/CVE-2005-1760.md): sysreport 1.3.15 and earlier includes contents of the up2date file in a report, which leaks the password for a proxy server in plaintext and (no CVSS)
- [CVE-2005-1763](https://cve.now/CVE-2005-1763.md): Buffer overflow in ptrace in the Linux Kernel for 64-bit architectures allows local users to write bytes into kernel memory. (no CVSS)
- [CVE-2005-1941](https://cve.now/CVE-2005-1941.md): SilverCity before 0.9.5-r1 installs (1) cgi-styler-form.py, (2) cgi-styler.py, and (3) source2html.py with read and write world permissions, (no CVSS)
- [CVE-2005-1942](https://cve.now/CVE-2005-1942.md): Cisco switches that support 802.1x security allow remote attackers to bypass port security and gain access to the VLAN via spoofed Cisco Dis (no CVSS)
- [CVE-2005-1943](https://cve.now/CVE-2005-1943.md): Multiple SQL injection vulnerabilities in Loki download manager 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) pas (no CVSS)
- [CVE-2005-1944](https://cve.now/CVE-2005-1944.md): xmysqladmin 1.0 and earlier allows local users to delete arbitrary files via a symlink attack on a database backup file in /tmp. (no CVSS)
- [CVE-2005-1945](https://cve.now/CVE-2005-1945.md): Cross-site scripting (XSS) vulnerability in the convert\_highlite\_words function in Invision Blog before 1.1.2 Final allows remote attackers (no CVSS)
- [CVE-2005-1946](https://cve.now/CVE-2005-1946.md): Multiple SQL injection vulnerabilities in Invision Blog before 1.1.2 Final allow remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2005-1947](https://cve.now/CVE-2005-1947.md): Cross-site request forgery (CSRF) vulnerability in Invision Gallery before 1.3.1 allows remote attackers to delete albums and images as anot (no CVSS)
- [CVE-2005-1948](https://cve.now/CVE-2005-1948.md): Multiple SQL injection vulnerabilities in Invision Gallery before 1.3.1 allow remote attackers to execute arbitrary SQL commands via (1) the (no CVSS)
- [CVE-2005-1949](https://cve.now/CVE-2005-1949.md): The eping\_validaddr function in functions.php for the ePing plugin for e107 portal allows remote attackers to execute arbitrary commands via (no CVSS)
- [CVE-2005-1950](https://cve.now/CVE-2005-1950.md): hints.pl in Webhints 1.03 allows remote attackers to execute arbitrary commands via shell metacharacters in the argument. (no CVSS)
- [CVE-2005-1951](https://cve.now/CVE-2005-1951.md): Multiple HTTP Response Splitting vulnerabilities in osCommerce 2.2 Milestone 2 and earlier allow remote attackers to spoof web content and p (no CVSS)
- [CVE-2005-1952](https://cve.now/CVE-2005-1952.md): Directory traversal vulnerability in Pico Server (pServ) 3.3 allows remote attackers to read arbitrary files and execute arbitrary commands (no CVSS)
- [CVE-2005-1953](https://cve.now/CVE-2005-1953.md): Heap-based buffer overflow in the CGI extension for Pico Server (pServ) 3.3 allows remote attackers to execute arbitrary code via a long HTT (no CVSS)
- [CVE-2005-1954](https://cve.now/CVE-2005-1954.md): singapore 0.9.11 allows remote attackers to obtain sensitive information via a direct request to (1) admin.class.php, (2) any .tpl.php file (no CVSS)
- [CVE-2005-1955](https://cve.now/CVE-2005-1955.md): Cross-site scripting (XSS) vulnerability in index.php in singapore 0.9.11 allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2005-1956](https://cve.now/CVE-2005-1956.md): File Upload Manager allows remote attackers to upload arbitrary files by modifying the test variable to contain a value of '~~~~~~' (six til (no CVSS)
- [CVE-2005-1957](https://cve.now/CVE-2005-1957.md): mtnpeak.net File Upload Manager does not properly check user authentication for certain actions, which allows remote attackers to provide a (no CVSS)
- [CVE-2005-1959](https://cve.now/CVE-2005-1959.md): jammail.pl in jamchen JamMail 1.8 allows remote attackers to execute arbitrary commands via shell metacharacters in the mail parameter. (no CVSS)
- [CVE-2005-1960](https://cve.now/CVE-2005-1960.md): The getemails function in C.J. (no CVSS)
- [CVE-2005-1961](https://cve.now/CVE-2005-1961.md): Unknown vulnerability in ObjectWeb Consortium C-JDBC before 1.3.1 allows local users to bypass intended access restrictions and obtain the c (no CVSS)
- [CVE-2005-1962](https://cve.now/CVE-2005-1962.md): Cross-site scripting (XSS) vulnerability in Cerberus Helpdesk 0.97.3 allows remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2005-1963](https://cve.now/CVE-2005-1963.md): Cerberus Helpdesk 0.97.3 allows remote attackers to obtain sensitive information via certain requests to (1) reports.php, (2) knowledgebase. (no CVSS)
- [CVE-2005-1964](https://cve.now/CVE-2005-1964.md): PHP remote file inclusion vulnerability in utilit.php for Ovidentia Portal allows remote attackers to execute arbitrary PHP code via the bab (no CVSS)
- [CVE-2005-1965](https://cve.now/CVE-2005-1965.md): PHP remote file inclusion vulnerability in siteframe.php for Broadpool Siteframe allows remote attackers to execute arbitrary code via a URL (no CVSS)
- [CVE-2005-1966](https://cve.now/CVE-2005-1966.md): The eTrace\_validaddr function in eTrace plugin for e107 portal allows remote attackers to execute arbitrary commands via shell metacharacter (no CVSS)
- [CVE-2005-1967](https://cve.now/CVE-2005-1967.md): Multiple SQL injection vulnerabilities in ProductCart Ecommerce before 2.7 allow remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2005-1968](https://cve.now/CVE-2005-1968.md): Cross-site scripting (XSS) vulnerability in ProductCart Ecommerce before 2.7 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2005-1969](https://cve.now/CVE-2005-1969.md): Cross-site scripting (XSS) vulnerability in Pragma Systems Telnetserver 6.0 allows remote attackers to inject arbitrary web script or HTML, (no CVSS)
- [CVE-2005-1970](https://cve.now/CVE-2005-1970.md): Symantec pcAnywhere 10.5x and 11.x before 11.5, with "Launch with Windows" enabled, allows local users with physical access to execute arbit (no CVSS)
- [CVE-2005-1971](https://cve.now/CVE-2005-1971.md): Directory traversal vulnerability in InteractivePHP FusionBB .11 Beta and earlier allows remote attackers to include arbitrary local files v (no CVSS)
- [CVE-2005-1972](https://cve.now/CVE-2005-1972.md): Multiple SQL injection vulnerabilities in InteractivePHP FusionBB .11 Beta and earlier allow remote attackers to execute arbitrary SQL comma (no CVSS)
- [CVE-2005-1973](https://cve.now/CVE-2005-1973.md): Java Web Start in Java 2 Platform Standard Edition (J2SE) 5.0 and 5.0 Update 1 allows applications to assign permissions to themselves and g (no CVSS)
- [CVE-2005-1974](https://cve.now/CVE-2005-1974.md): Unspecified vulnerability in Java 2 Platform, Standard Edition (J2SE) 5.0 and 5.0 Update 1 and J2SE 1.4.2 up to 1.4.2\_07, as used in multipl (no CVSS)
- [CVE-2005-1975](https://cve.now/CVE-2005-1975.md): Multiple cross-site scripting (XSS) vulnerabilities in Annuaire 1Two 1.1 and earlier allow remote attackers to inject arbitrary web script o (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-06-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.