# CVEs published 2005-06-22

13 CVEs were published on June 22, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-1250](https://cve.now/CVE-2005-1250.md): SQL injection vulnerability in the logon screen of the web front end (NmConsole/Login.asp) for IpSwitch WhatsUp Professional 2005 SP1 allows (no CVSS)
- [CVE-2005-1266](https://cve.now/CVE-2005-1266.md): Apache SpamAssassin 3.0.1, 3.0.2, and 3.0.3 allows remote attackers to cause a denial of service (CPU consumption and slowdown) via a messag (no CVSS)
- [CVE-2005-1524](https://cve.now/CVE-2005-1524.md): PHP file inclusion vulnerability in top\_graph\_header.php in Cacti 0.8.6d and possibly earlier versions allows remote attackers to execute ar (no CVSS)
- [CVE-2005-1525](https://cve.now/CVE-2005-1525.md): SQL injection vulnerability in config\_settings.php for Cacti before 0.8.6e allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2005-1526](https://cve.now/CVE-2005-1526.md): PHP remote file inclusion vulnerability in config\_settings.php in Cacti before 0.8.6e allows remote attackers to execute arbitrary PHP code (no CVSS)
- [CVE-2005-2042](https://cve.now/CVE-2005-2042.md): Cross-site scripting (XSS) vulnerability in ajax-spell before 1.8 allows remote attackers to inject arbitrary web script or HTML via onmouse (no CVSS)
- [CVE-2005-2043](https://cve.now/CVE-2005-2043.md): Directory traversal vulnerability in XAMPP before 1.4.14 allows remote attackers to inject arbitrary HTML and PHP code via lang.php. (no CVSS)
- [CVE-2005-2044](https://cve.now/CVE-2005-2044.md): Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitrary web script or HT (no CVSS)
- [CVE-2005-2045](https://cve.now/CVE-2005-2045.md): Multiple SQL injection vulnerabilities in DUware DUportal PRO 3.4.3 allow remote attackers to execute arbitrary SQL commands via the (1) iCh (no CVSS)
- [CVE-2005-2046](https://cve.now/CVE-2005-2046.md): Multiple SQL injection vulnerabilities in DUware DUamazon Pro 3.0 and 3.1 allow remote attackers to execute arbitrary SQL commands via the ( (no CVSS)
- [CVE-2005-2047](https://cve.now/CVE-2005-2047.md): Multiple SQL injection vulnerabilities in DUware DUpaypal Pro 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) iCat (no CVSS)
- [CVE-2005-2048](https://cve.now/CVE-2005-2048.md): Multiple SQL injection vulnerabilities in DUware DUforum 3.1, and possibly other versions, allow remote attackers to execute arbitrary SQL c (no CVSS)
- [CVE-2005-2049](https://cve.now/CVE-2005-2049.md): Multiple SQL injection vulnerabilities in DUware DUclassmate 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) iState (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-06-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.