# CVEs published 2005-06-21

163 CVEs were published on June 21, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2000-1225](https://cve.now/CVE-2000-1225.md): Xitami 2.5b installs the testcgi.exe program by default in the cgi-bin directory, which allows remote attackers to gain sensitive configurat (no CVSS)
- [CVE-2000-1226](https://cve.now/CVE-2000-1226.md): Snort 1.6, when running in straight ASCII packet logging mode or IDS mode with straight decoded ASCII packet logging selected, allows remote (no CVSS)
- [CVE-2001-1478](https://cve.now/CVE-2001-1478.md): Buffer overflow in xlock in UnixWare 7.1.0 and 7.1.1 and Open Unix 8.0.0 allows local users to execute arbitrary code. (no CVSS)
- [CVE-2001-1479](https://cve.now/CVE-2001-1479.md): smcboot in Sun SMC (Sun Management Center) 2.0 in Solaris 8 allows local users to delete arbitrary files via a symlink attack on /tmp/smc$SM (no CVSS)
- [CVE-2001-1480](https://cve.now/CVE-2001-1480.md): Java Runtime Environment (JRE) and SDK 1.2 through 1.3.0\_04 allows untrusted applets to access the system clipboard. (no CVSS)
- [CVE-2001-1481](https://cve.now/CVE-2001-1481.md): Xitami 2.4 through 2.5 b4 stores the Administrator password in plaintext in the default.aut file, whose default permissions are world-readab (no CVSS)
- [CVE-2001-1482](https://cve.now/CVE-2001-1482.md): SQL injection vulnerability in bb\_memberlist.php for phpBB 1.4.2 allows remote attackers to execute arbitrary SQL queries via the $sortby va (no CVSS)
- [CVE-2001-1483](https://cve.now/CVE-2001-1483.md): One-Time Passwords In Everything (a.k.a OPIE) 2.32 and 2.4 allows remote attackers to determine the existence of user accounts by printing r (no CVSS)
- [CVE-2001-1484](https://cve.now/CVE-2001-1484.md): Alcatel ADSL modems allow remote attackers to access the Trivial File Transfer Protocol (TFTP) to modify firmware and configuration via a bo (no CVSS)
- [CVE-2001-1487](https://cve.now/CVE-2001-1487.md): popauth utility in Qualcomm Qpopper 4.0 and earlier allows local users to overwrite arbitrary files and execute commands as the pop user via (no CVSS)
- [CVE-2001-1488](https://cve.now/CVE-2001-1488.md): Open Projects Network Internet Relay Chat (IRC) daemon u2.10.05.18 does not perform a double-reverse DNS lookup, which allows remote attacke (no CVSS)
- [CVE-2001-1489](https://cve.now/CVE-2001-1489.md): Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a l (no CVSS)
- [CVE-2001-1490](https://cve.now/CVE-2001-1490.md): Mozilla 0.9.6 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a large number of i (no CVSS)
- [CVE-2001-1491](https://cve.now/CVE-2001-1491.md): Opera 5.11 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a large number of imag (no CVSS)
- [CVE-2001-1494](https://cve.now/CVE-2001-1494.md): script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescr (no CVSS)
- [CVE-2001-1495](https://cve.now/CVE-2001-1495.md): network\_query.php in Network Query Tool 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the target par (no CVSS)
- [CVE-2001-1496](https://cve.now/CVE-2001-1496.md): Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to cause a denial of servic (no CVSS)
- [CVE-2001-1497](https://cve.now/CVE-2001-1497.md): Microsoft Internet Explorer 4.0 through 6.0 could allow local users to differentiate between alphanumeric and non-alphanumeric characters us (no CVSS)
- [CVE-2001-1498](https://cve.now/CVE-2001-1498.md): Buffer overflow in mod\_bf 0.2 allows local users to execute arbitrary commands via a long script. (no CVSS)
- [CVE-2001-1499](https://cve.now/CVE-2001-1499.md): Check Point VPN-1 4.1SP4 using SecuRemote returns different error messages for valid and invalid users, with prompts that vary depending on (no CVSS)
- [CVE-2001-1500](https://cve.now/CVE-2001-1500.md): ProFTPD 1.2.2rc2, and possibly other versions, does not properly verify reverse-resolved hostnames by performing forward resolution, which a (no CVSS)
- [CVE-2001-1501](https://cve.now/CVE-2001-1501.md): The glob functionality in ProFTPD 1.2.1, and possibly other versions allows remote attackers to cause a denial of service (CPU and memory co (no CVSS)
- [CVE-2001-1502](https://cve.now/CVE-2001-1502.md): webcart.cgi in Mountain Network Systems WebCart 8.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the NE (no CVSS)
- [CVE-2001-1503](https://cve.now/CVE-2001-1503.md): The finger daemon (in.fingerd) in Sun Solaris 2.5 through 8 and SunOS 5.5 through 5.8 allows remote attackers to list all accounts on a host (no CVSS)
- [CVE-2001-1504](https://cve.now/CVE-2001-1504.md): Lotus Notes R5 Client 4.6 allows remote attackers to execute arbitrary commands via a Lotus Notes object with code in an event, which is aut (no CVSS)
- [CVE-2001-1505](https://cve.now/CVE-2001-1505.md): tinc 1.0pre3 and 1.0pre4 allows remote attackers to inject data into user sessions by sniffing and replaying packets. (no CVSS)
- [CVE-2001-1506](https://cve.now/CVE-2001-1506.md): Unknown vulnerability in the file system protection subsystem in HP Secure OS Software for Linux 1.0 allows additional user privileges on so (no CVSS)
- [CVE-2002-1666](https://cve.now/CVE-2002-1666.md): Unknown vulnerability in Oracle E-Business Suite 11i.1 through 11i.6 allows remote attackers to execute unauthorized PL/SQL procedures by mo (no CVSS)
- [CVE-2002-1667](https://cve.now/CVE-2002-1667.md): The virtual memory management system in FreeBSD 4.5-RELEASE and earlier does not properly check the existence of a VM object during page inv (no CVSS)
- [CVE-2002-1668](https://cve.now/CVE-2002-1668.md): HP-UX 11.11 and earlier allows local users to cause a denial of service (kernel deadlock), due to a "file system weakness" that is possibly (no CVSS)
- [CVE-2002-1669](https://cve.now/CVE-2002-1669.md): pkg\_add in FreeBSD 4.2 through 4.4 creates a temporary directory with world-searchable permissions, which may allow local users to modify wo (no CVSS)
- [CVE-2002-1670](https://cve.now/CVE-2002-1670.md): Microsoft Windows XP Professional upgrade edition overwrites previously installed patches for Internet Explorer 6.0, leaving Internet Explor (no CVSS)
- [CVE-2002-1671](https://cve.now/CVE-2002-1671.md): Microsoft Internet Explorer 5.0, 5.01, and 5.5 allows remote attackers to monitor the contents of the clipboard via the getData method of th (no CVSS)
- [CVE-2002-1672](https://cve.now/CVE-2002-1672.md): Webmin 0.92, when installed from an RPM, creates /var/webmin with insecure permissions (world readable), which could allow local users to re (no CVSS)
- [CVE-2002-1673](https://cve.now/CVE-2002-1673.md): The web interface for Webmin 0.92 does not properly quote or filter script code in files that are displayed to the interface, which allows l (no CVSS)
- [CVE-2002-1674](https://cve.now/CVE-2002-1674.md): procfs on FreeBSD before 4.5 allows local users to cause a denial of service (kernel panic) by removing a file that the fstatfs function ref (no CVSS)
- [CVE-2002-1675](https://cve.now/CVE-2002-1675.md): Format string vulnerability in the Cio\_PrintF function of cio\_main.c in Unreal IRCd 3.1.1 allows remote attackers to cause a denial of servi (no CVSS)
- [CVE-2002-1676](https://cve.now/CVE-2002-1676.md): BindView NetInventory 1.0, when used with NetRC 1.0, allows local users to read sensitive information (passwords) by deleting the HOSTCFG.\_N (no CVSS)
- [CVE-2002-1677](https://cve.now/CVE-2002-1677.md): 14all.cgi 1.1p15 in mrtgconfig allows remote attackers to determine the physical path to the web root directory via a request with an invali (no CVSS)
- [CVE-2002-1678](https://cve.now/CVE-2002-1678.md): Cross-site scripting (XSS) vulnerability in memberlist.php in Jelsoft vBulletin 2.0 rc 2 through 2.2.4 allows remote attackers to steal auth (no CVSS)
- [CVE-2002-1679](https://cve.now/CVE-2002-1679.md): Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin 2.2.0 allows remote attackers to execute arbitrary script as other users by in (no CVSS)
- [CVE-2002-1680](https://cve.now/CVE-2002-1680.md): Cross-site scripting (XSS) vulnerability in CGI Online Worldweb Shopping 1.1 (a.k.a. (no CVSS)
- [CVE-2002-1681](https://cve.now/CVE-2002-1681.md): Cross-site scripting (XSS) vulnerability in Slashcode CVS releases June 17 through July 1 2002 allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2002-1682](https://cve.now/CVE-2002-1682.md): NewsReactor 1.0 uses a weak encryption scheme, which could allow local users to decrypt the passwords and gain access to other users' newsgr (no CVSS)
- [CVE-2002-1683](https://cve.now/CVE-2002-1683.md): Cross-site scripting (XSS) vulnerability in BadBlue Personal Edition 1.7.3 allows remote attackers to execute arbitrary script as other user (no CVSS)
- [CVE-2002-1684](https://cve.now/CVE-2002-1684.md): Directory traversal vulnerability in (1) Deerfield D2Gfx 1.0.2 or (2) BadBlue Enterprise Edition 1.5.x and BadBlue Personal Edition 1.5.6 al (no CVSS)
- [CVE-2002-1685](https://cve.now/CVE-2002-1685.md): Cross-site scripting vulnerability (XSS) in BadBlue Enterprise Edition and Personal Edition 1.7 and 1.7.2 allows remote attackers to execute (no CVSS)
- [CVE-2002-1686](https://cve.now/CVE-2002-1686.md): Buffer overflow in lscfg of unknown versions of AIX has unknown impact. (no CVSS)
- [CVE-2002-1687](https://cve.now/CVE-2002-1687.md): Buffer overflow in the diagnostics library in AIX allows local users to "cause data and instructions to be overwritten" via a long DIAGNOSTI (no CVSS)
- [CVE-2002-1688](https://cve.now/CVE-2002-1688.md): The browser history feature in Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to execute arbitrary script as other user (no CVSS)
- [CVE-2002-1689](https://cve.now/CVE-2002-1689.md): Unknown vulnerability in the login program on AIX before 4.0 could allow remote users to specify 100 or more environment variables when logg (no CVSS)
- [CVE-2002-1690](https://cve.now/CVE-2002-1690.md): Unknown vulnerability in AIX before 4.0 with unknown attack vectors and unknown impact, aka "security issue," as fixed by APAR IY28225. (no CVSS)
- [CVE-2002-1691](https://cve.now/CVE-2002-1691.md): Alcatel OmniPCX 4400 installs known user accounts and passwords in the /etc/password file by default, which allows remote attackers to gain (no CVSS)
- [CVE-2002-1692](https://cve.now/CVE-2002-1692.md): Buffer overflow in backup utility of Microsoft Windows 95 allows attackers to execute arbitrary code by causing a filename with a long exten (no CVSS)
- [CVE-2002-1694](https://cve.now/CVE-2002-1694.md): Microsoft Internet Information Server (IIS) 4.0 opens log files with FILE\_SHARE\_READ and FILE\_SHARE\_WRITE permissions, which could allow rem (no CVSS)
- [CVE-2002-1695](https://cve.now/CVE-2002-1695.md): Norton Internet Security 2001 opens log files with FILE\_SHARE\_READ and FILE\_SHARE\_WRITE permissions, which could allow remote attackers to m (no CVSS)
- [CVE-2002-1696](https://cve.now/CVE-2002-1696.md): Microsoft Outlook plug-in PGP version 7.0, 7.0.3, and 7.0.4 silently saves a decrypted copy of a message to hard disk when "Automatically de (no CVSS)
- [CVE-2002-1697](https://cve.now/CVE-2002-1697.md): Electronic Code Book (ECB) mode in VTun 2.0 through 2.5 uses a weak encryption algorithm that produces the same ciphertext from the same pla (no CVSS)
- [CVE-2002-1698](https://cve.now/CVE-2002-1698.md): Buffer overflow in Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service (crash) via a long F (no CVSS)
- [CVE-2002-1699](https://cve.now/CVE-2002-1699.md): SQL injection vulnerability in ASP Client Check (ASPCC) 1.3 and 1.5 allows remote attackers to bypass authentication and gain unauthorized a (no CVSS)
- [CVE-2002-1700](https://cve.now/CVE-2002-1700.md): Cross-site scripting vulnerability (XSS) in the missing template handler in Macromedia ColdFusion MX allows remote attackers to execute arbi (no CVSS)
- [CVE-2002-1702](https://cve.now/CVE-2002-1702.md): Cross-site scripting vulnerability (XSS) in DeltaScripts PHP Classifieds 6.0.5 allows remote attackers to execute arbitrary script as other (no CVSS)
- [CVE-2002-1703](https://cve.now/CVE-2002-1703.md): Cross-site scripting vulnerability (XSS) in auction.cgi for Mewsoft NetAuction 3.0 allows remote attackers to execute arbitrary script as ot (no CVSS)
- [CVE-2002-1704](https://cve.now/CVE-2002-1704.md): Zeroboard 4.1, when the "allow\_url\_fopen" and "register\_globals" variables are enabled, allows remote attackers to execute arbitrary PHP cod (no CVSS)
- [CVE-2002-1705](https://cve.now/CVE-2002-1705.md): Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to cause a denial of service (crash) via a Cascading Style Sheet (CSS) w (no CVSS)
- [CVE-2002-1706](https://cve.now/CVE-2002-1706.md): Cisco IOS software 11.3 through 12.2 running on Cisco uBR7200 and uBR7100 series Universal Broadband Routers allows remote attackers to modi (no CVSS)
- [CVE-2002-1707](https://cve.now/CVE-2002-1707.md): install.php in phpBB 2.0 through 2.0.1, when "allow\_url\_fopen" and "register\_globals" variables are set to "on", allows remote attackers to (no CVSS)
- [CVE-2002-1708](https://cve.now/CVE-2002-1708.md): Cross-site scripting vulnerability (XSS) in BasiliX Webmail 1.10 allows remote attackers to execute arbitrary script as other users by injec (no CVSS)
- [CVE-2002-1709](https://cve.now/CVE-2002-1709.md): SQL injection vulnerability in BasiliX Webmail 1.10 allows remote attackers to obtain sensitive information or possibly modify data via the (no CVSS)
- [CVE-2002-1710](https://cve.now/CVE-2002-1710.md): The attachment capability in Compose Mail in BasiliX Webmail 1.1.0 does not check whether the attachment was uploaded by the user or came fr (no CVSS)
- [CVE-2002-1711](https://cve.now/CVE-2002-1711.md): BasiliX 1.1.0 saves attachments in a world readable /tmp/BasiliX directory, which allows local users to read other users' attachments. (no CVSS)
- [CVE-2002-1712](https://cve.now/CVE-2002-1712.md): Microsoft Windows 2000 allows remote attackers to cause a denial of service (memory consumption) by sending a flood of empty TCP/IP packets (no CVSS)
- [CVE-2002-1713](https://cve.now/CVE-2002-1713.md): The Standard security setting for Mandrake-Security package (msec) in Mandrake 8.2 installs home directories with world-readable permissions (no CVSS)
- [CVE-2002-1714](https://cve.now/CVE-2002-1714.md): Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to cause a denial of service (crash) via an object of type "text/html" w (no CVSS)
- [CVE-2002-1715](https://cve.now/CVE-2002-1715.md): SSH 1 through 3, and possibly other versions, allows local users to bypass restricted shells such as rbash or rksh by uploading a script to (no CVSS)
- [CVE-2002-1716](https://cve.now/CVE-2002-1716.md): The Host() function in the Microsoft spreadsheet component on Microsoft Office XP allows remote attackers to create arbitrary files using th (no CVSS)
- [CVE-2002-1717](https://cve.now/CVE-2002-1717.md): Microsoft Internet Information Server (IIS) 5.1 allows remote attackers to view path information via a GET request to (1) /\_vti\_pvt/access.c (no CVSS)
- [CVE-2002-1718](https://cve.now/CVE-2002-1718.md): Microsoft Internet Information Server (IIS) 5.1 may allow remote attackers to view the contents of a Frontpage Server Extension (FPSE) file, (no CVSS)
- [CVE-2002-1719](https://cve.now/CVE-2002-1719.md): Unknown vulnerability in Bavo 0.3 allows remote attackers to modify posted messages. (no CVSS)
- [CVE-2002-1720](https://cve.now/CVE-2002-1720.md): SQL injection vulnerability in Spooky Login 2.0 through 2.5 allows remote attackers to bypass authentication and gain privileges via the pas (no CVSS)
- [CVE-2002-1721](https://cve.now/CVE-2002-1721.md): Off-by-one error in alterMIME 0.1.10 and 0.1.11 allows remote attackers to cause a denial of service (crash) via an x-header that causes snp (no CVSS)
- [CVE-2002-1722](https://cve.now/CVE-2002-1722.md): Logitech iTouch keyboards allows attackers with physical access to the system to bypass the screen locking function and execute user-defined (no CVSS)
- [CVE-2002-1723](https://cve.now/CVE-2002-1723.md): Powerboards 2.2b allows remote attackers to view the full path to the backend database by sending a cookie containing a non-existent usernam (no CVSS)
- [CVE-2002-1724](https://cve.now/CVE-2002-1724.md): Cross-site scripting vulnerability (XSS) in phpimageview.php for PHPImageView 1.0 allows remote attackers to execute arbitrary script as oth (no CVSS)
- [CVE-2002-1725](https://cve.now/CVE-2002-1725.md): phpimageview.php in PHPImageView 1.0 allows remote attackers to obtain sensitive information via the pw=show option, which invokes the phpin (no CVSS)
- [CVE-2002-1726](https://cve.now/CVE-2002-1726.md): secure\_inc.php in PhotoDB 1.4 allows remote attackers to bypass authentication via a URL with a large Time parameter, non-empty rmtusername (no CVSS)
- [CVE-2002-1727](https://cve.now/CVE-2002-1727.md): Cross-site scripting vulnerability (XSS) in (1) as\_web.exe and (2) as\_web4.exe in askSam Web Publisher 1 and 4 allows remote attackers to ex (no CVSS)
- [CVE-2002-1728](https://cve.now/CVE-2002-1728.md): askSam Web Publisher 1.0 and 4.0 allows remote attackers to determine the full path to the web root directory via a request for a file that (no CVSS)
- [CVE-2002-1729](https://cve.now/CVE-2002-1729.md): Cross-site scripting vulnerability (XSS) in ASPjar Guestbook 1.00 allows remote attackers to execute arbitrary script as other users via the (no CVSS)
- [CVE-2002-1730](https://cve.now/CVE-2002-1730.md): ASPjar Guestbook 1.00 allows remote attackers to delete arbitrary messages accessing the delete.asp administrative script with certain cooki (no CVSS)
- [CVE-2002-1731](https://cve.now/CVE-2002-1731.md): The System Request menu in IBM AS/400 allows local users to list valid user accounts by viewing the object names that are type USRPRF. (no CVSS)
- [CVE-2002-1732](https://cve.now/CVE-2002-1732.md): Multiple cross-site scripting (XSS) vulnerabilities in Actinic Catalog 4.7.0 allow remote attackers to inject arbitrary web script or HTML v (no CVSS)
- [CVE-2002-1733](https://cve.now/CVE-2002-1733.md): Cross-site scripting (XSS) vulnerability in the web-based message board in Prospero Technologies allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2002-1734](https://cve.now/CVE-2002-1734.md): NewsPro 1.01 allows remote attackers to gain unauthorized administrator access by setting their authentication cookie to "logged,true". (no CVSS)
- [CVE-2002-1735](https://cve.now/CVE-2002-1735.md): Buffer overflow in dlogin 1.0a could allow local users to gain privileges via unknown attack vectors. (no CVSS)
- [CVE-2002-1736](https://cve.now/CVE-2002-1736.md): Unknown vulnerability in CGINews before 1.06 allow remote attackers to read arbitrary files via "unfiltered user input." (no CVSS)
- [CVE-2002-1737](https://cve.now/CVE-2002-1737.md): Astaro Security Linux 2.016 creates world-writable files and directories, which allows local users to overwrite arbitrary files. (no CVSS)
- [CVE-2002-1738](https://cve.now/CVE-2002-1738.md): Alt-N Technologies MDaemon 5.0.5.0 and earlier creates a default MDaemon mail account with a password of MServer, which could allow remote a (no CVSS)
- [CVE-2002-1739](https://cve.now/CVE-2002-1739.md): Alt-N Technologies Mdaemon 5.0 through 5.0.6 uses a weak encryption algorithm to store user passwords, which allows local users to crack pas (no CVSS)
- [CVE-2002-1740](https://cve.now/CVE-2002-1740.md): Buffer overflow in WorldClient.cgi in WorldClient in Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users to execute arbitrary (no CVSS)
- [CVE-2002-1741](https://cve.now/CVE-2002-1741.md): Directory traversal vulnerability in WorldClient.cgi in WorldClient for Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users to (no CVSS)
- [CVE-2002-1742](https://cve.now/CVE-2002-1742.md): SOAP::Lite 0.50 through 0.52 allows remote attackers to load arbitrary Perl functions by suppling a non-existent function in a script using (no CVSS)
- [CVE-2002-1743](https://cve.now/CVE-2002-1743.md): AOL ICQ 2002a Build 3722 allows remote attackers to cause a denial of service (crash) via a malformed .hpf file. (no CVSS)
- [CVE-2002-1744](https://cve.now/CVE-2002-1744.md): Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and determine the existen (no CVSS)
- [CVE-2002-1745](https://cve.now/CVE-2002-1745.md): Off-by-one error in the CodeBrws.asp sample script in Microsoft IIS 5.0 allows remote attackers to view the source code for files with exten (no CVSS)
- [CVE-2002-1746](https://cve.now/CVE-2002-1746.md): Vtun 2.5b1 allows remote attackers to inject data into user sessions by sniffing and replaying packets. (no CVSS)
- [CVE-2002-1747](https://cve.now/CVE-2002-1747.md): Vtun 2.5b1 does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and p (no CVSS)
- [CVE-2002-1748](https://cve.now/CVE-2002-1748.md): Unknown vulnerability in Slash 2.1.x and 2.2 through 2.2.2, as used in Slashcode, allows remote authenticated users to gain access to arbitr (no CVSS)
- [CVE-2002-1749](https://cve.now/CVE-2002-1749.md): Windows 2000 Terminal Services, when using the disconnect feature of the client, does not properly lock itself if it is left idle until the (no CVSS)
- [CVE-2002-1750](https://cve.now/CVE-2002-1750.md): csGuestbook.cgi in CGISCRIPT.NET csGuestbook 1.0 allows remote attackers to execute arbitrary Perl code via the setup parameter, which is pr (no CVSS)
- [CVE-2002-1751](https://cve.now/CVE-2002-1751.md): csLiveSupport.cgi in CGIScript.net csLiveSupport allows remote attackers to execute arbitrary Perl code via the setup parameter, which is pr (no CVSS)
- [CVE-2002-1752](https://cve.now/CVE-2002-1752.md): csChatRBox.cgi in CGIScript.net csChat-R-Box allows remote attackers to execute arbitrary Perl code via the setup parameter, which is proces (no CVSS)
- [CVE-2002-1753](https://cve.now/CVE-2002-1753.md): csNewsPro.cgi in CGIScript.net csNews Professional (csNewsPro) allows remote attackers to execute arbitrary Perl code via the setup paramete (no CVSS)
- [CVE-2002-1754](https://cve.now/CVE-2002-1754.md): Buffer overflow in Novell NetWare Client 4.80 through 4.83 allows local users to cause a denial of service (crash) by using ping, traceroute (no CVSS)
- [CVE-2002-1755](https://cve.now/CVE-2002-1755.md): tinc 1.0pre3 and 1.0pre4 VPN does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions withou (no CVSS)
- [CVE-2002-1756](https://cve.now/CVE-2002-1756.md): ACDSee 4.0 allows remote attackers to cause a denial of service (crash) via an .ais file with a long file description field, which is not pr (no CVSS)
- [CVE-2002-1757](https://cve.now/CVE-2002-1757.md): PHProjekt 2.0 through 3.1 relies on the $PHP\_SELF variable for authentication, which allows remote attackers to bypass authentication for sc (no CVSS)
- [CVE-2002-1758](https://cve.now/CVE-2002-1758.md): PHProjekt 2.0 through 3.1 allows remote attackers to view or modify data via requests to certain scripts that do not verify if the user is l (no CVSS)
- [CVE-2002-1759](https://cve.now/CVE-2002-1759.md): The upload function in PHProjekt 2.0 through 3.1 does not properly verify certain variables related to uploaded data, which allows remote at (no CVSS)
- [CVE-2002-1760](https://cve.now/CVE-2002-1760.md): Multiple SQL injection vulnerabilities in PHProjekt 2.0 through 3.1 allow remote attackers to execute arbitrary SQL commands via the unknown (no CVSS)
- [CVE-2002-1761](https://cve.now/CVE-2002-1761.md): Directory traversal vulnerability in PHProjekt 2.0 through 3.1 allows remote attackers to read arbitrary files via .. (no CVSS)
- [CVE-2002-1762](https://cve.now/CVE-2002-1762.md): Microsoft Baseline Security Analyzer (MBSA) 1.0 stores security scans in a known location C:\\Documents and Settings\\username\\SecurityScans i (no CVSS)
- [CVE-2002-1763](https://cve.now/CVE-2002-1763.md): The dtscreen Sun Solaris 8 CDE screensaver crashes when the "Shift" and "Return" keys are pressed repeatedly and quickly, which allows local (no CVSS)
- [CVE-2002-1764](https://cve.now/CVE-2002-1764.md): acroread in Adobe Acrobat Reader 4.05 on Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files. (no CVSS)
- [CVE-2002-1765](https://cve.now/CVE-2002-1765.md): Evolution 1.0.3 and 1.0.4 allows remote attackers to cause a denial of service (memory consumption and crash) via an email with a malformed (no CVSS)
- [CVE-2002-1766](https://cve.now/CVE-2002-1766.md): Buffer overflow in Composer in Netscape 4.77 allows local users to overwrite process memory and execute arbitrary code via a font tag with a (no CVSS)
- [CVE-2002-1767](https://cve.now/CVE-2002-1767.md): Buffer overflow in tnslsnr of Oracle 8i Database Server 8.1.5 for Linux allows local users to execute arbitrary code as the oracle user via (no CVSS)
- [CVE-2002-1768](https://cve.now/CVE-2002-1768.md): Cisco IOS 11.1 through 12.2, when HSRP support is not enabled, allows remote attackers to cause a denial of service (CPU consumption) via ra (no CVSS)
- [CVE-2002-1769](https://cve.now/CVE-2002-1769.md): Microsoft Site Server 3.0 prior to SP4 installs a default user, LDAP\_Anonymous, with a default password of LdapPassword\_1, which allows remo (no CVSS)
- [CVE-2002-1770](https://cve.now/CVE-2002-1770.md): Qualcomm Eudora 5.1 allows remote attackers to execute arbitrary code via an HTML e-mail message that uses a file:// URL in a t:video tag to (no CVSS)
- [CVE-2002-1771](https://cve.now/CVE-2002-1771.md): Matt Wright FormMail 1.9 and earlier allows remote attackers to send spam or anonymous e-mail by injecting a newline character followed by C (no CVSS)
- [CVE-2002-1772](https://cve.now/CVE-2002-1772.md): Novell Netware 5.0 through 5.1 may allow local users to gain "Domain Admin" rights by logging into a Novell Directory Services (NDS) account (no CVSS)
- [CVE-2002-1773](https://cve.now/CVE-2002-1773.md): Buffer overflow in ICQ 2.6x for MacOS X 10.0 through 10.1.2 allows remote attackers to cause a denial of service and possibly execute arbitr (no CVSS)
- [CVE-2002-1774](https://cve.now/CVE-2002-1774.md): NOTE: this issue has been disputed by the vendor. (no CVSS)
- [CVE-2002-1775](https://cve.now/CVE-2002-1775.md): NOTE: this issue has been disputed by the vendor. (no CVSS)
- [CVE-2002-1776](https://cve.now/CVE-2002-1776.md): NOTE: this issue has been disputed by the vendor. (no CVSS)
- [CVE-2002-1777](https://cve.now/CVE-2002-1777.md): NOTE: this issue has been disputed by the vendor. (no CVSS)
- [CVE-2002-1778](https://cve.now/CVE-2002-1778.md): Symantec Norton Personal Firewall 2002 allows remote attackers to bypass the portscan protection by using a (1) SYN/FIN, (2) SYN/FIN/URG, (3 (no CVSS)
- [CVE-2002-1779](https://cve.now/CVE-2002-1779.md): The "block fragmented IP Packets" option in Symantec Norton Personal Firewall 2002 (NPW) does not properly protect against certain attacks o (no CVSS)
- [CVE-2002-1780](https://cve.now/CVE-2002-1780.md): BPM Studio Pro 4.2 by ALCATech GmbH includes a webserver that allows a remote attacker to cause a denial of service (crash) by sending a URL (no CVSS)
- [CVE-2002-1781](https://cve.now/CVE-2002-1781.md): Multiple buffer overflows in DeleGate 7.7.0 through 7.8.1 allow remote attackers to execute arbitrary code, as demonstrated using a long USE (no CVSS)
- [CVE-2002-1782](https://cve.now/CVE-2002-1782.md): The default configuration of University of Washington IMAP daemon (wu-imapd), when running on a system that does not allow shell access, all (no CVSS)
- [CVE-2005-2021](https://cve.now/CVE-2005-2021.md): Cross-site scripting (XSS) vulnerability in cPanel 9.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the us (no CVSS)
- [CVE-2005-2022](https://cve.now/CVE-2005-2022.md): Unknown vulnerability in Webmail in iPlanet Messaging Server 5.2 Patch 1 and Sun ONE Messaging Server 6.2 allows remote attackers to execute (no CVSS)
- [CVE-2005-2023](https://cve.now/CVE-2005-2023.md): The send\_pinentry\_environment function in asshelp.c in gpg2 on SUSE Linux 9.3 does not properly handle certain options, which can prevent pi (no CVSS)
- [CVE-2005-2024](https://cve.now/CVE-2005-2024.md): Vipul Razor Agents (razor-agents) before 2.70 allows remote attackers to cause a denial of service via (1) certain "unusual HTML messages" o (no CVSS)
- [CVE-2005-2025](https://cve.now/CVE-2005-2025.md): Cisco VPN 3000 Concentrator before 4.1.7.F allows remote attackers to determine valid groupnames by sending an IKE Aggressive Mode packet wi (no CVSS)
- [CVE-2005-2026](https://cve.now/CVE-2005-2026.md): Enterasys Vertical Horizon VH-2402S before firmware 2.05.05.09 has a hard-coded account and password for debugging, which allows remote atta (no CVSS)
- [CVE-2005-2027](https://cve.now/CVE-2005-2027.md): Enterasys Vertical Horizon VH-2402S before firmware 2.05.05.09 does not properly restrict certain debugging commands to the ADMIN account, w (no CVSS)
- [CVE-2005-2028](https://cve.now/CVE-2005-2028.md): SQL injection vulnerability in index.php for MercuryBoard 1.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via th (no CVSS)
- [CVE-2005-2029](https://cve.now/CVE-2005-2029.md): amaroK Web Frontend 1.3 stores the globals.inc file under the web root without a .php extension and insufficient access control, which allow (no CVSS)
- [CVE-2005-2030](https://cve.now/CVE-2005-2030.md): Ultimate PHP Board (UPB) 1.9.6 GOLD uses weak encryption for passwords in the users.dat file, which allows attackers to easily decrypt the p (no CVSS)
- [CVE-2005-2031](https://cve.now/CVE-2005-2031.md): Multiple SQL injection vulnerabilities in socialMPN allow remote attackers to execute arbitrary SQL commands via (1) the sid parameter to ar (no CVSS)
- [CVE-2005-2032](https://cve.now/CVE-2005-2032.md): Unknown vulnerability in lpadmin on Sun Solaris 7, 8, and 9 allows local users to overwrite arbitrary files. (no CVSS)
- [CVE-2005-2033](https://cve.now/CVE-2005-2033.md): Directory traversal vulnerability in folderview.asp for Blue-Collar Productions i-Gallery 3.3 allows remote attackers to read arbitrary file (no CVSS)
- [CVE-2005-2034](https://cve.now/CVE-2005-2034.md): Cross-site scripting (XSS) vulnerability in folderview.asp for BlueCollar iGallery 3.3 allows remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2005-2035](https://cve.now/CVE-2005-2035.md): SQL injection vulnerability in login.asp for Cool Cafe (Cool Café) Chat 1.2.1 allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2005-2036](https://cve.now/CVE-2005-2036.md): modifyUser.asp in Cool Cafe (Cool Café) Chat 1.2.1 allows remote attackers to obtain the administrator password and email address via a modi (no CVSS)
- [CVE-2005-2037](https://cve.now/CVE-2005-2037.md): Multiple SQL injection vulnerabilities in Fortibus CMS 4.0.0 allow remote attackers to execute arbitrary SQL commands via (1) the username o (no CVSS)
- [CVE-2005-2038](https://cve.now/CVE-2005-2038.md): Fortibus CMS 4.0.0 allows remote attackers to modify information of other users, including Admin, via the "My info" page. (no CVSS)
- [CVE-2005-2039](https://cve.now/CVE-2005-2039.md): Unknown vulnerability in "various plugins" for NanoBlogger 3.2.1 and earlier allows remote attackers to execute arbitrary commands. (no CVSS)
- [CVE-2005-2040](https://cve.now/CVE-2005-2040.md): Multiple buffer overflows in the getterminaltype function in telnetd for Heimdal before 0.6.5 may allow remote attackers to execute arbitrar (no CVSS)
- [CVE-2005-2041](https://cve.now/CVE-2005-2041.md): Buffer overflow in addschup in HAURI ViRobot 2.0, and possibly other products, allows remote attackers to execute arbitrary code via a long (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-06-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.