# CVEs published 2005-06-28

220 CVEs were published on June 28, 2005: 1 critical, 1 high. Days are UTC.

- [CVE-2000-1227](https://cve.now/CVE-2000-1227.md): Windows NT 4.0 and Windows 2000 hosts allow remote attackers to cause a denial of service (unavailable connections) by sending multiple SMB (no CVSS)
- [CVE-2002-1783](https://cve.now/CVE-2002-1783.md): CRLF injection vulnerability in PHP 4.2.1 through 4.2.3, when allow\_url\_fopen is enabled, allows remote attackers to modify HTTP headers for (no CVSS)
- [CVE-2002-1784](https://cve.now/CVE-2002-1784.md): Unknown vulnerability in inetd in HP Tru64 Unix 4.0f through 5.1a allows remote attackers to cause a denial of service via unknown attack ve (no CVSS)
- [CVE-2002-1785](https://cve.now/CVE-2002-1785.md): Cross-site scripting (XSS) vulnerability in Zeus Administration Server in Zeus Web Server 4.0 through 4.1r2 allows remote authenticated user (no CVSS)
- [CVE-2002-1786](https://cve.now/CVE-2002-1786.md): SGI IRIX 6.5 through 6.5.14 applies a umask of 022 to root core dumps, which allows local users to read the core dumps and possibly obtain s (no CVSS)
- [CVE-2002-1787](https://cve.now/CVE-2002-1787.md): Buffer overflow in uux in eoe.sw.uucp package of SGI IRIX 6.5 through 6.5.17 allows local users to execute arbitrary code via unknown attack (no CVSS)
- [CVE-2002-1788](https://cve.now/CVE-2002-1788.md): Format string vulnerability in the nn\_exitmsg function in nn 6.6.0 through 6.6.3 allows remote NNTP servers to execute arbitrary code via fo (no CVSS)
- [CVE-2002-1789](https://cve.now/CVE-2002-1789.md): Format string vulnerability in newsx NNTP client before 1.4.8 allows local users to execute arbitrary code via format string specifiers that (no CVSS)
- [CVE-2002-1790](https://cve.now/CVE-2002-1790.md): The SMTP service in Microsoft Internet Information Services (IIS) 4.0 and 5.0 allows remote attackers to bypass anti-relaying rules and send (no CVSS)
- [CVE-2002-1791](https://cve.now/CVE-2002-1791.md): SGI IRIX 6.5 through 6.5.17 creates temporary desktop files with world-writable permissions, which allows local users to overwrite or corrup (no CVSS)
- [CVE-2002-1792](https://cve.now/CVE-2002-1792.md): Buffer overflow in Fake Identd 0.9 through 1.4 allows remote attackers to execute arbitrary code as root via a long request that is split in (no CVSS)
- [CVE-2002-1793](https://cve.now/CVE-2002-1793.md): HTTP Server mod\_ssl module running on HP-UX 11.04 with Virtualvault OS (VVOS) 4.5 through 4.6 closes the connection when the Apache server t (no CVSS)
- [CVE-2002-1794](https://cve.now/CVE-2002-1794.md): Unknown vulnerability in pam\_authz in the LDAP-UX Integration product on HP-UX 11.00 and 11.11 allows remote attackers to execute r-commands (no CVSS)
- [CVE-2002-1795](https://cve.now/CVE-2002-1795.md): Cross-site scripting (XSS) vulnerability in connect.asp in Microsoft Terminal Services Advanced Client (TSAC) ActiveX control allows remote (no CVSS)
- [CVE-2002-1796](https://cve.now/CVE-2002-1796.md): ChaiVM EZloader for HP color LaserJet 4500 and 4550 and HP LaserJet 4100 and 8150 does not properly verify JAR signatures for new services, (CVSS 7.8)
- [CVE-2002-1797](https://cve.now/CVE-2002-1797.md): ChaiVM for HP color LaserJet 4500 and 4550 or HP LaserJet 4100 and 8150 does not properly enforce access control restrictions, which could a (no CVSS)
- [CVE-2002-1798](https://cve.now/CVE-2002-1798.md): MidiCart PHP, PHP Plus, and PHP Maxi allows remote attackers to (1) upload arbitrary php files via a direct request to admin/upload.php or ( (no CVSS)
- [CVE-2002-1799](https://cve.now/CVE-2002-1799.md): Cross-site scripting (XSS) vulnerability in phpRank 1.8 allows remote attackers to inject arbitrary web script or HTML via the (1) email par (no CVSS)
- [CVE-2002-1800](https://cve.now/CVE-2002-1800.md): phpRank 1.8 stores the administrative password in plaintext on the server and in the "ap" cookie, which allows remote attackers to retrieve (no CVSS)
- [CVE-2002-1801](https://cve.now/CVE-2002-1801.md): ImageFolio 2.23 through 2.27 allows remote attackers to obtain sensitive information via a nonexistent image category, which leaks the web r (no CVSS)
- [CVE-2002-1802](https://cve.now/CVE-2002-1802.md): Cross-site scripting (XSS) vulnerability in Xoops 1.0 RC3 allows remote attackers to inject arbitrary web script or HTML via Javascript in a (no CVSS)
- [CVE-2002-1803](https://cve.now/CVE-2002-1803.md): Cross-site scripting (XSS) vulnerability in PHP-Nuke 6.0 allows remote attackers to inject arbitrary web script or HTML via Javascript in an (no CVSS)
- [CVE-2002-1804](https://cve.now/CVE-2002-1804.md): Cross-site scripting (XSS) vulnerability in NPDS 4.8 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG (no CVSS)
- [CVE-2002-1805](https://cve.now/CVE-2002-1805.md): Cross-site scripting (XSS) vulnerability in DaCode 1.2.0 allows remote attackers to inject arbitrary web script or HTML via Javascript in an (no CVSS)
- [CVE-2002-1806](https://cve.now/CVE-2002-1806.md): Cross-site scripting (XSS) vulnerability in Drupal 4.0.0 allows remote attackers to inject arbitrary web script or HTML via Javascript in an (no CVSS)
- [CVE-2002-1807](https://cve.now/CVE-2002-1807.md): Cross-site scripting (XSS) vulnerability in phpWebSite 0.8.3 allows remote attackers to inject arbitrary web script or HTML via Javascript i (no CVSS)
- [CVE-2002-1808](https://cve.now/CVE-2002-1808.md): Cross-site scripting (XSS) vulnerability in Meunity Community System 1.1 allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2002-1809](https://cve.now/CVE-2002-1809.md): The default configuration of the Windows binary release of MySQL 3.23.2 through 3.23.52 has a NULL root password, which could allow remote a (no CVSS)
- [CVE-2002-1810](https://cve.now/CVE-2002-1810.md): D-Link DWL-900AP+ Access Point 2.1 and 2.2 allows remote attackers to access the TFTP server without authentication and read the config.img (no CVSS)
- [CVE-2002-1811](https://cve.now/CVE-2002-1811.md): Belkin F5D6130 Wireless Network Access Point running firmware AP14G8 allows remote attackers to cause a denial of service (connection loss) (no CVSS)
- [CVE-2002-1812](https://cve.now/CVE-2002-1812.md): Buffer overflow in gdam123 0.933 and 0.942 allows local users to execute arbitrary code via a long filename parameter. (no CVSS)
- [CVE-2002-1813](https://cve.now/CVE-2002-1813.md): Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8.2790 allows remote attackers to execute arbitrary programs by specifyin (no CVSS)
- [CVE-2002-1814](https://cve.now/CVE-2002-1814.md): Buffer overflow in efstools in Bonobo, when installed setuid, allows local users to execute arbitrary code via long command line arguments. (no CVSS)
- [CVE-2002-1815](https://cve.now/CVE-2002-1815.md): Directory traversal vulnerability in source.php and source.cgi in Aquonics File Manager 1.5 allows remote attackers to read arbitrary files (no CVSS)
- [CVE-2002-1816](https://cve.now/CVE-2002-1816.md): Off-by-one buffer overflow in the sock\_gets function in sockhelp.c for ATPhttpd 0.4b and earlier allows remote attackers to execute arbitrar (CVSS 9.8)
- [CVE-2002-1817](https://cve.now/CVE-2002-1817.md): Unknown vulnerability in Veritas Cluster Server (VCS) 1.2 for WindowsNT, Cluster Server 1.3.0 for Solaris, and Cluster Server 1.3.1 for HP-U (no CVSS)
- [CVE-2002-1818](https://cve.now/CVE-2002-1818.md): ezhttpbench.php in eZ httpbench 1.1 allows remote attackers to read arbitrary files via a full pathname in the AnalyseSite parameter. (no CVSS)
- [CVE-2002-1819](https://cve.now/CVE-2002-1819.md): Directory traversal vulnerability in TinyHTTPD 0.1 .0 allows remote attackers to read or execute arbitrary files via a ".." (dot dot) in the (no CVSS)
- [CVE-2002-1820](https://cve.now/CVE-2002-1820.md): register.php in Ultimate PHP Board (UPB) 1.0 and 1.0b uses an administrative account Admin with a capital "A," but allows a remote attacker (no CVSS)
- [CVE-2002-1821](https://cve.now/CVE-2002-1821.md): Ultimate PHP Board (UPB) 1.0 and 1.0b allows remote authenticated users to gain privileges and perform unauthorized actions via direct reque (no CVSS)
- [CVE-2002-1822](https://cve.now/CVE-2002-1822.md): IBM HTTP Server 1.0 on AS/400 allows remote attackers to obtain the path to the web root directory and other sensitive information, which is (no CVSS)
- [CVE-2002-1823](https://cve.now/CVE-2002-1823.md): Buffer overflow in the HttpGetRequest function in Zeroo HTTP server 1.5 allows remote attackers to execute arbitrary code via a long HTTP re (no CVSS)
- [CVE-2002-1824](https://cve.now/CVE-2002-1824.md): Microsoft Internet Explorer 6.0, when handling an expired CA-CERT in a webserver's certificate chain during a SSL/TLS handshake, does not pr (no CVSS)
- [CVE-2002-1825](https://cve.now/CVE-2002-1825.md): Format string vulnerability in PerlRTE\_example1.pl in WASD 7.1, 7.2.0 through 7.2.3, and 8.0.0 allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2002-1826](https://cve.now/CVE-2002-1826.md): grsecurity 1.9.4 for Linux kernel 2.4.18 allows local users to bypass read-only permissions by using mmap to directly map /dev/mem or /dev/k (no CVSS)
- [CVE-2002-1827](https://cve.now/CVE-2002-1827.md): Sendmail 8.9.0 through 8.12.3 allows local users to cause a denial of service by obtaining an exclusive lock on the (1) alias, (2) map, (3) (no CVSS)
- [CVE-2002-1828](https://cve.now/CVE-2002-1828.md): Savant Webserver 3.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET request with a negative Content-Length val (no CVSS)
- [CVE-2002-1829](https://cve.now/CVE-2002-1829.md): Cross-site scripting (XSS) vulnerability in codeparse.php in Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attackers to inject arbitr (no CVSS)
- [CVE-2002-1830](https://cve.now/CVE-2002-1830.md): Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attackers to bypass authentication and access modifier options via a direct request to (no CVSS)
- [CVE-2002-1831](https://cve.now/CVE-2002-1831.md): Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service (crash) via an invite request that cont (no CVSS)
- [CVE-2002-1832](https://cve.now/CVE-2002-1832.md): Unknown vulnerability in the "ipopts decode" functionality in Firestorm IDS 0.4.0 through 0.4.2 allows remote attackers to cause a denial of (no CVSS)
- [CVE-2002-1833](https://cve.now/CVE-2002-1833.md): The default configurations for DocuTech 6110 and DocuTech 6115 have a default administrative password of (1) "service!" on Solaris 8.0 or (2 (no CVSS)
- [CVE-2002-1834](https://cve.now/CVE-2002-1834.md): The default configuration of Xerox DocuTech 6110 and DocuTech 6115 allows remote attackers to connect to the web server and (1) submit print (no CVSS)
- [CVE-2002-1835](https://cve.now/CVE-2002-1835.md): The default configuration of Xerox DocuTech 6110 and DocuTech 6115 running Solaris 8.0 has a large number of unnecessary services enabled su (no CVSS)
- [CVE-2002-1836](https://cve.now/CVE-2002-1836.md): The default configuration of Xerox DocuTech 6110 and DocuTech 6115 exports certain NFS shares to the world with world writable permissions, (no CVSS)
- [CVE-2002-1837](https://cve.now/CVE-2002-1837.md): The getAlbumToDisplay function in idsShared.pm for Image Display System (IDS) 0.81 allows remote attackers to determine the existence of arb (no CVSS)
- [CVE-2002-1838](https://cve.now/CVE-2002-1838.md): Charities.cron 1.0.2 through 1.6.0 allows local users to write to arbitrary files via a symlink attack on temporary files. (no CVSS)
- [CVE-2002-1839](https://cve.now/CVE-2002-1839.md): Trend Micro InterScan VirusWall for Windows NT 3.52 does not record the sender's IP address in the headers for a mail message when it is pas (no CVSS)
- [CVE-2002-1840](https://cve.now/CVE-2002-1840.md): irssi IRC client 0.8.4, when downloaded after 14-March-2002, could contain a backdoor in the configuration file, which allows remote attacke (no CVSS)
- [CVE-2002-1841](https://cve.now/CVE-2002-1841.md): The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers (no CVSS)
- [CVE-2002-1842](https://cve.now/CVE-2002-1842.md): Perlbot 1.0 beta allows remote attackers to execute arbitrary commands via shell metacharacters in (1) a word that is being spell checked or (no CVSS)
- [CVE-2002-1843](https://cve.now/CVE-2002-1843.md): Perlbot 1.9.2 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the $text variable in SpelCheck.pm or (2 (no CVSS)
- [CVE-2002-1844](https://cve.now/CVE-2002-1844.md): Microsoft Windows Media Player (WMP) 6.3, when installed on Solaris, installs executables with world-writable permissions, which allows loca (no CVSS)
- [CVE-2002-1845](https://cve.now/CVE-2002-1845.md): Cross-site scripting (XSS) vulnerability in index.php in Yet Another Bulletin Board (YaBB) 1.40 and 1.41 allows remote attackers to inject a (no CVSS)
- [CVE-2002-1846](https://cve.now/CVE-2002-1846.md): Yet Another Bulletin Board (YaBB) 1.40 and 1.41 does not require a user to submit the correct password before changing it to a new password, (no CVSS)
- [CVE-2002-1847](https://cve.now/CVE-2002-1847.md): Buffer overflow in mplay32.exe of Microsoft Windows Media Player (WMP) 6.3 through 7.1 allows remote attackers to execute arbitrary commands (no CVSS)
- [CVE-2002-1848](https://cve.now/CVE-2002-1848.md): TightVNC before 1.2.4 running on Windows stores unencrypted passwords in the password text control of the WinVNC Properties dialog, which co (no CVSS)
- [CVE-2002-1849](https://cve.now/CVE-2002-1849.md): ParaChat Server 4.0 does not log users off if the browser's back button is used, which allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2002-1850](https://cve.now/CVE-2002-1850.md): mod\_cgi in Apache 2.0.39 and 2.0.40 allows local users and possibly remote attackers to cause a denial of service (hang and memory consumpti (no CVSS)
- [CVE-2002-1851](https://cve.now/CVE-2002-1851.md): Buffer overflow in WS\_FTP Pro 7.5 allows remote attackers to execute code on a client system via unknown attack vectors. (no CVSS)
- [CVE-2002-1852](https://cve.now/CVE-2002-1852.md): Cross-site scripting (XSS) vulnerability in Monkey 0.5.0 allows remote attackers to inject arbitrary web script or HTML via (1) the URL or ( (no CVSS)
- [CVE-2002-1853](https://cve.now/CVE-2002-1853.md): Cross-site scripting (XSS) vulnerability in MyNewsGroups 0.4 and 0.4.1 allows remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2002-1854](https://cve.now/CVE-2002-1854.md): Rlaj whois CGI script (whois.cgi) 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain name fiel (no CVSS)
- [CVE-2002-1855](https://cve.now/CVE-2002-1855.md): Macromedia JRun 3.0 through 4.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains (no CVSS)
- [CVE-2002-1856](https://cve.now/CVE-2002-1856.md): HP Application Server 8.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java (no CVSS)
- [CVE-2002-1857](https://cve.now/CVE-2002-1857.md): jo! jo Webserver 1.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class (no CVSS)
- [CVE-2002-1858](https://cve.now/CVE-2002-1858.md): Oracle Oracle9i Application Server 1.0.2.2 and 9.0.2 through 9.0.2.0.1, when running on Windows, allows remote attackers to retrieve files i (no CVSS)
- [CVE-2002-1859](https://cve.now/CVE-2002-1859.md): Orion Application Server 1.5.3, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains (no CVSS)
- [CVE-2002-1860](https://cve.now/CVE-2002-1860.md): Pramati Server 3.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class f (no CVSS)
- [CVE-2002-1861](https://cve.now/CVE-2002-1861.md): Sybase Enterprise Application Server 4.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which (no CVSS)
- [CVE-2002-1862](https://cve.now/CVE-2002-1862.md): SmartMail Server 2.0 allows remote attackers to cause a denial of service (crash) by sending data and closing the connection before all the (no CVSS)
- [CVE-2002-1863](https://cve.now/CVE-2002-1863.md): Iomega Network Attached Storage (NAS) A300U, and possibly other models, does not allow the FTP service to be disabled, which allows local us (no CVSS)
- [CVE-2002-1864](https://cve.now/CVE-2002-1864.md): Directory traversal vulnerability in Simple Web Server (SWS) 0.0.4 through 0.1.0 allows remote attackers to read arbitrary files via a ".." (no CVSS)
- [CVE-2002-1865](https://cve.now/CVE-2002-1865.md): Buffer overflow in the Embedded HTTP server, as used in (1) D-Link DI-804 4.68, Dl-704 V2.56b6, and Dl-704 V2.56b5 and (2) Linksys Etherfast (no CVSS)
- [CVE-2002-1866](https://cve.now/CVE-2002-1866.md): Simple Web Server (SWS) 0.0.4 through 0.1.0 does not close file descriptors for 404 error messages, which could allow remote attackers to ca (no CVSS)
- [CVE-2002-1867](https://cve.now/CVE-2002-1867.md): The default configuration of BizDesign ImageFolio 2.23 through 2.26 does not control access to (1) admin/setup.cgi, which allows remote atta (no CVSS)
- [CVE-2002-1868](https://cve.now/CVE-2002-1868.md): Dispair 0.1 and 0.2 allows remote attackers to execute arbitrary shell commands via certain form fields. (no CVSS)
- [CVE-2002-1869](https://cve.now/CVE-2002-1869.md): Heysoft EventSave 5.1 and 5.2 and Heysoft EventSave+ 5.1 and 5.2 does not check whether the log file can be written to, which allows attacke (no CVSS)
- [CVE-2002-1870](https://cve.now/CVE-2002-1870.md): Simple Web Server (SWS) 0.0.4 through 0.1.0 does not properly handle when the recv function call fails, which may allow remote attackers to (no CVSS)
- [CVE-2002-1871](https://cve.now/CVE-2002-1871.md): pkgadd in Sun Solaris 2.5.1 through 8 installs files setuid/setgid root if the pkgmap file contains a "?" (question mark) in the (1) mode, ( (no CVSS)
- [CVE-2002-1872](https://cve.now/CVE-2002-1872.md): Microsoft SQL Server 6.0 through 2000, with SQL Authentication enabled, uses weak password encryption (XOR), which allows remote attackers t (no CVSS)
- [CVE-2002-1873](https://cve.now/CVE-2002-1873.md): Microsoft Exchange 2000, when used with Microsoft Remote Procedure Call (MSRPC), allows remote attackers to cause a denial of service (crash (no CVSS)
- [CVE-2002-1874](https://cve.now/CVE-2002-1874.md): astrocam.cgi in AstroCam 0.9-1-1 through 1.4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP req (no CVSS)
- [CVE-2002-1875](https://cve.now/CVE-2002-1875.md): Entercept Agent 2.5 agent for Windows, released before May 21, 2002, allows local administrative users to obtain the entercept agent passwor (no CVSS)
- [CVE-2002-1876](https://cve.now/CVE-2002-1876.md): Microsoft Exchange 2000 allows remote authenticated attackers to cause a denial of service via a large number of rapid requests, which consu (no CVSS)
- [CVE-2002-1877](https://cve.now/CVE-2002-1877.md): NETGEAR FM114P allows remote attackers to bypass access restrictions for web sites via a URL that uses the IP address instead of the hostnam (no CVSS)
- [CVE-2002-1878](https://cve.now/CVE-2002-1878.md): PHP remote file inclusion vulnerability in w-Agora 4.1.3 allows remote attackers to execute arbitrary PHP code via the inc\_dir parameter. (no CVSS)
- [CVE-2002-1879](https://cve.now/CVE-2002-1879.md): SQL injection vulnerability in LokwaBB 1.2.2 allows remote attackers to execute arbitrary SQL commands via the (1) member parameter to membe (no CVSS)
- [CVE-2002-1880](https://cve.now/CVE-2002-1880.md): LokwaBB 1.2.2 allows remote attackers to read arbitrary messages by modifying the pmid parameter to pm.php. (no CVSS)
- [CVE-2002-1881](https://cve.now/CVE-2002-1881.md): Macromedia Flash Player 4.0 r12 through 6.0.47.0 allows remote attackers to cause a denial of service (web browser crash) via malformed cont (no CVSS)
- [CVE-2002-1882](https://cve.now/CVE-2002-1882.md): Unknown vulnerability in AolSecurityPrivate.class in Oracle E-Business Suite 11i 11.1 through 11.6 allows remote attackers to bypass user au (no CVSS)
- [CVE-2002-1883](https://cve.now/CVE-2002-1883.md): Trolltech Qt Assistant 1.0 in Trolltech Qt 3.0.3, when loaded from the Designer, opens port 7358 for interprocess communication, which allow (no CVSS)
- [CVE-2002-1884](https://cve.now/CVE-2002-1884.md): index.php in Py-Membres 3.1 allows remote attackers to log in as an administrator by setting the pymembs parameter to "admin". (no CVSS)
- [CVE-2002-1885](https://cve.now/CVE-2002-1885.md): PHP remote file inclusion vulnerability in showhits.php3 for PowerPhlogger (PPhlogger) 2.0.9 through 2.2.2 allows remote attackers to execut (no CVSS)
- [CVE-2002-1886](https://cve.now/CVE-2002-1886.md): TightAuction 3.0 stores config.inc under the web document root with insufficient access control, which allows remote attackers to obtain the (no CVSS)
- [CVE-2002-1887](https://cve.now/CVE-2002-1887.md): PHP remote file inclusion vulnerability in customize.php for phpMyNewsletter 0.6.10 allows remote attackers to execute arbitrary PHP code vi (no CVSS)
- [CVE-2002-1888](https://cve.now/CVE-2002-1888.md): CommonName Toolbar 3.5.2.0 sends unqualified domain name requests to the CommonName organization and possibly other web servers for name res (no CVSS)
- [CVE-2002-1889](https://cve.now/CVE-2002-1889.md): Off-by-one buffer overflow in the context\_action function in context.c of Logsurfer 1.41 through 1.5a allows remote attackers to cause a den (no CVSS)
- [CVE-2002-1890](https://cve.now/CVE-2002-1890.md): rhmask 1.0-9 in Red Hat Linux 7.1 allows local users to overwrite arbitrary files via a symlink attack on the mask file. (no CVSS)
- [CVE-2002-1891](https://cve.now/CVE-2002-1891.md): Buffer overflow in IRCIT 0.3.1 IRC client allows remote attackers to execute arbitrary code via a long invite request. (no CVSS)
- [CVE-2002-1892](https://cve.now/CVE-2002-1892.md): NETGEAR FVS318 running firmware 1.1 stores the username and password in a readable format when a backup of the configuration file is made, w (no CVSS)
- [CVE-2002-1893](https://cve.now/CVE-2002-1893.md): Cross-site scripting (XSS) vulnerability in ArGoSoft Mail Server Pro 1.8.1.9 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2002-1894](https://cve.now/CVE-2002-1894.md): Cross-site scripting (XSS) vulnerability in viewtopic.php in phpBB 2.0.3 allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2002-1895](https://cve.now/CVE-2002-1895.md): The servlet engine in Jakarta Apache Tomcat 3.3 and 4.0.4, when using IIS and the ajp1.3 connector, allows remote attackers to cause a denia (no CVSS)
- [CVE-2002-1896](https://cve.now/CVE-2002-1896.md): Buffer overflow in Alsaplayer 0.99.71, when installed setuid root, allows local users to execute arbitrary code via a long (1) -f or (2) -o (no CVSS)
- [CVE-2002-1897](https://cve.now/CVE-2002-1897.md): MyWebServer LLC MyWebServer 1.0.2 allows remote attackers to cause a denial of service (crash) via a long HTTP request, possibly triggering (no CVSS)
- [CVE-2002-1898](https://cve.now/CVE-2002-1898.md): Terminal 1.3 in Apple Mac OS X 10.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a telnet:// link, whic (no CVSS)
- [CVE-2002-1899](https://cve.now/CVE-2002-1899.md): Cross-site scripting (XSS) vulnerability in IceWarp Web Mail 3.3.3 and 3.4.5 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2002-1900](https://cve.now/CVE-2002-1900.md): Cross-site scripting (XSS) vulnerability in Pinboard 1.0 allows remote attackers to inject arbitrary web script or HTML via tasklists. (no CVSS)
- [CVE-2002-1901](https://cve.now/CVE-2002-1901.md): Cross-site scripting (XSS) vulnerability in Bodo Bauer BBGallery 1.0 allows remote attackers to inject arbitrary web script or HTML via imag (no CVSS)
- [CVE-2002-1902](https://cve.now/CVE-2002-1902.md): CGIForum 1.0 through 1.05 allows remote attackers to cause a denial of service (infinite recursion) by creating a message board post that is (no CVSS)
- [CVE-2002-1903](https://cve.now/CVE-2002-1903.md): Pine 4.2.1 through 4.4.4 puts Unix usernames and/or uid into Sender: and X-Sender: headers, which could allow remote attackers to obtain sen (no CVSS)
- [CVE-2002-1904](https://cve.now/CVE-2002-1904.md): Buffer overflow in the Log function in util.c in GazTek ghttpd 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a lon (no CVSS)
- [CVE-2002-1905](https://cve.now/CVE-2002-1905.md): Buffer overflow in the web server of Polycom ViaVideo 2.2 and 3.0 allows remote attackers to cause a denial of service (crash) via a long HT (no CVSS)
- [CVE-2002-1906](https://cve.now/CVE-2002-1906.md): The web server for Polycom ViaVideo 2.2 and 3.0 allows remote attackers to cause a denial of service (CPU consumption) by sending incomplete (no CVSS)
- [CVE-2002-1907](https://cve.now/CVE-2002-1907.md): TelCondex SimpleWebServer 2.06.20817 allows remote attackers to cause a denial of service (crash) via a long HTTP GET request. (no CVSS)
- [CVE-2002-1908](https://cve.now/CVE-2002-1908.md): Microsoft IIS 5.0 and 5.1 allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with a Host header that (no CVSS)
- [CVE-2002-1909](https://cve.now/CVE-2002-1909.md): Click2Learn Ingenium Learning Management System 5.1 and 6.1 stores the hashed administrative password in a config.txt file under the htdocs (no CVSS)
- [CVE-2002-1910](https://cve.now/CVE-2002-1910.md): Click2Learn Ingenium Learning Management System 5.1 and 6.1 uses weak encryption for passwords (reversible algorithm), which allows attacker (no CVSS)
- [CVE-2002-1911](https://cve.now/CVE-2002-1911.md): ZoneAlarm Pro 3.0 and 3.1, when configured to block all traffic, allows remote attackers to cause a denial of service (CPU and memory consum (no CVSS)
- [CVE-2002-1912](https://cve.now/CVE-2002-1912.md): SkyStream EMR5000 1.16 through 1.18 does not drop packets or disable the Ethernet interface when the buffers are full, which allows remote a (no CVSS)
- [CVE-2002-1913](https://cve.now/CVE-2002-1913.md): phptonuke.php in myPHPNuke 1.8.8 allows remote attackers to read arbitrary files via a full pathname in the filnavn variable. (no CVSS)
- [CVE-2002-1914](https://cve.now/CVE-2002-1914.md): dump 0.4 b10 through b29 allows local users to cause a denial of service (execution prevention) by using flock() to lock the /etc/dumpdates (no CVSS)
- [CVE-2002-1915](https://cve.now/CVE-2002-1915.md): tip on multiple BSD-based operating systems allows local users to cause a denial of service (execution prevention) by using flock() to lock (no CVSS)
- [CVE-2002-1916](https://cve.now/CVE-2002-1916.md): Pirch and RusPirch, when auto-log is enabled, allows remote attackers to cause a denial of service (crash) via a nickname containing an MS-D (no CVSS)
- [CVE-2002-1917](https://cve.now/CVE-2002-1917.md): CRLF injection vulnerability in the "User Profile: Send Email" feature in Geeklog 1.35 and 1.3.5sr1 allows remote attackers to obtain e-mail (no CVSS)
- [CVE-2002-1918](https://cve.now/CVE-2002-1918.md): Buffer overflow in Microsoft Active Data Objects (ADO) in Microsoft MDAC 2.5 through 2.7 allows remote attackers to have unknown impact with (no CVSS)
- [CVE-2002-1919](https://cve.now/CVE-2002-1919.md): SQL injection vulnerability in shopadmin.asp in VP-ASP 4.0 allows remote attackers to execute arbitrary SQL commands and bypass authenticati (no CVSS)
- [CVE-2002-1920](https://cve.now/CVE-2002-1920.md): Buffer overflow in FtpXQ 2.5 allows remote attackers to cause a denial of service (crash) via a MKD command with a long directory name. (no CVSS)
- [CVE-2002-1921](https://cve.now/CVE-2002-1921.md): The default configuration of MySQL 3.20.32 through 3.23.52, when running on Windows, does set the bind address to the loopback interface, wh (no CVSS)
- [CVE-2002-1922](https://cve.now/CVE-2002-1922.md): Cross-site scripting (XSS) vulnerability in global.php in Jelsoft vBulletin 2.0.0 through 2.2.8 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2002-1923](https://cve.now/CVE-2002-1923.md): The default configuration in MySQL 3.20.32 through 3.23.52, when running on Windows, does not have logging enabled, which could allow remote (no CVSS)
- [CVE-2002-1924](https://cve.now/CVE-2002-1924.md): PowerChute plus 5.0.2 creates a "Pwrchute" directory during installation that is shared and world writeable, which could allow remote attack (no CVSS)
- [CVE-2002-1925](https://cve.now/CVE-2002-1925.md): Tiny Personal Firewall 3.0 through 3.0.6 allows remote attackers to cause a denial of service (crash) by via SYN, UDP, ICMP and TCP portscan (no CVSS)
- [CVE-2002-1926](https://cve.now/CVE-2002-1926.md): Directory traversal vulnerability in source.php in Aquonics File Manager 1.5 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2002-1927](https://cve.now/CVE-2002-1927.md): Aquonics File Manager 1.5 allows users with edit privileges to modify user accounts by editing the userlist.cgi file. (no CVSS)
- [CVE-2002-1928](https://cve.now/CVE-2002-1928.md): 602Pro LAN SUITE 2002 allows remote attackers to view the directory tree via an HTTP GET request with a trailing "~" (tilde) or ".bak" exten (no CVSS)
- [CVE-2002-1929](https://cve.now/CVE-2002-1929.md): Cross-site scripting (XSS) vulnerability in pafiledb.php in PHP Arena paFileDB 1.1.3 through 3.0 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2002-1930](https://cve.now/CVE-2002-1930.md): Buffer overflow in AN HTTPd 1.38 through 1.4.1c allows remote attackers to execute arbitrary code via a SOCKS4 request with a long username. (no CVSS)
- [CVE-2002-1931](https://cve.now/CVE-2002-1931.md): Cross-site scripting (XSS) vulnerability in PHP Arena paFileDB 1.1.3 and 2.1.1 allows remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2002-1932](https://cve.now/CVE-2002-1932.md): Microsoft Windows XP and Windows 2000, when configured to send administrative alerts and the "Do not overwrite events (clear log manually)" (no CVSS)
- [CVE-2002-1933](https://cve.now/CVE-2002-1933.md): The terminal services screensaver for Microsoft Windows 2000 does not automatically lock the terminal window if the window is minimized, whi (no CVSS)
- [CVE-2002-1934](https://cve.now/CVE-2002-1934.md): Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 2.0.1 leaks sensitive information during boot-up, which allows attackers to obta (no CVSS)
- [CVE-2002-1935](https://cve.now/CVE-2002-1935.md): Pingtel Xpressa 1.2.5 through 2.0.1 uses predictable (1) Call-ID, (2) CSeq, and (3) "To" and "From" SIP URL values in a Session Identificati (no CVSS)
- [CVE-2002-1936](https://cve.now/CVE-2002-1936.md): UTStarcom BAS 1000 3.1.10 creates several default or back door accounts and passwords, which allows remote attackers to gain access via (1) (no CVSS)
- [CVE-2002-1937](https://cve.now/CVE-2002-1937.md): Symantec Firewall/VPN Appliance 100 through 200R hardcodes the administrator's MAC address inside the firewall's configuration, which allows (no CVSS)
- [CVE-2002-1938](https://cve.now/CVE-2002-1938.md): Virgil CGI Scanner 0.9 allows remote attackers to execute arbitrary commands via the (1) tar (TARGET) or (2) zielport (ZIELPORT) parameters. (no CVSS)
- [CVE-2002-1939](https://cve.now/CVE-2002-1939.md): FlashFXP 1.4 prints FTP passwords in plaintext when there are transfers in the queue, which allows attackers to obtain FTP passwords of othe (no CVSS)
- [CVE-2002-1940](https://cve.now/CVE-2002-1940.md): LCC-Win32 3.2 compiler, when running on Windows 95, 98, or ME, writes portions of previously used memory after the import table, which could (no CVSS)
- [CVE-2002-1941](https://cve.now/CVE-2002-1941.md): Buffer overflow in RadioBird WebServer 4 Everyone 1.28 allows remote attackers to cause a denial of service (crash) via a long HTTP GET requ (no CVSS)
- [CVE-2002-1942](https://cve.now/CVE-2002-1942.md): Imatix Xitami 2.5 b5 does not properly terminate certain Keep-Alive connections that have been broken or closed early, which allows remote a (no CVSS)
- [CVE-2002-1943](https://cve.now/CVE-2002-1943.md): SafeTP 1.46, when network address translation (NAT) is being used, leaks the internal IP address of the FTP server in a response to a passiv (no CVSS)
- [CVE-2002-1944](https://cve.now/CVE-2002-1944.md): Motorola Surfboard 4200 cable modem allows remote attackers to cause a denial of service (crash) by performing a SYN scan using a tool such (no CVSS)
- [CVE-2002-1945](https://cve.now/CVE-2002-1945.md): Buffer overflow in SmartMail Server 1.0 Beta 10 allows remote attackers to cause a denial of service (crash) via a long request to (1) TCP p (no CVSS)
- [CVE-2002-1946](https://cve.now/CVE-2002-1946.md): Videsh Sanchar Nigam Limited (VSNL) Integrated Dialer Software 1.2.000, when the "Save Password" option is used, stores the password with a (no CVSS)
- [CVE-2002-1947](https://cve.now/CVE-2002-1947.md): Webmin 0.21 through 1.0 uses the same built-in SSL key for all installations, which allows remote attackers to eavesdrop or highjack the SSL (no CVSS)
- [CVE-2002-1948](https://cve.now/CVE-2002-1948.md): Multiple buffer overflows in Gringotts 0.5.9 allows local users to execute arbitrary commands via unknown attack vectors. (no CVSS)
- [CVE-2002-1949](https://cve.now/CVE-2002-1949.md): The Network Attached Storage (NAS) Administration Web Page for Iomega NAS A300U transmits passwords in cleartext, which allows remote attack (no CVSS)
- [CVE-2002-1950](https://cve.now/CVE-2002-1950.md): Cross-site scripting (XSS) vulnerability in phpRank 1.8 allows remote attackers to inject arbitrary web script or HTML via the (1) the email (no CVSS)
- [CVE-2002-1951](https://cve.now/CVE-2002-1951.md): Buffer overflow in GoAhead WebServer 2.1 allows remote attackers to execute arbitrary code via a long HTTP GET request with a large number o (no CVSS)
- [CVE-2002-1952](https://cve.now/CVE-2002-1952.md): phpRank 1.8 does not properly check the return codes for MySQL operations when authenticating users, which could allow remote attackers to a (no CVSS)
- [CVE-2002-1953](https://cve.now/CVE-2002-1953.md): Heap-based buffer overflow in the goim handler of AOL Instant Messenger (AIM) 4.4 through 4.8.2616 allows remote attackers to cause a denial (no CVSS)
- [CVE-2002-1954](https://cve.now/CVE-2002-1954.md): Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.2.3 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2002-1955](https://cve.now/CVE-2002-1955.md): Iomega NAS A300U uses cleartext LANMAN authentication when mounting CIFS/SMB drives, which allows remote attackers to perform a man-in-the-m (no CVSS)
- [CVE-2002-1956](https://cve.now/CVE-2002-1956.md): ROX Filer 1.1.9 and 1.2 is installed with world writable permissions, which allows local users to write to arbitrary files. (no CVSS)
- [CVE-2002-1957](https://cve.now/CVE-2002-1957.md): Buffer overflow in the netlog function in pen.c for Pen 0.9.1 and 0.9.2 allows remote attackers to execute arbitrary commands via malformed (no CVSS)
- [CVE-2002-1958](https://cve.now/CVE-2002-1958.md): Cross-site scripting (XSS) vulnerability in kmMail 1.0, 1.0a, and 1.0b allows remote attackers to inject arbitrary web script or HTML via (1 (no CVSS)
- [CVE-2002-1959](https://cve.now/CVE-2002-1959.md): Nagios 1.0b1 through 1.0b3 allows remote attackers to execute arbitrary commands via shell metacharacters in plugin output. (no CVSS)
- [CVE-2002-1960](https://cve.now/CVE-2002-1960.md): Cross-site scripting (XSS) vulnerability in Cybozu Share360 1.1 allows remote attackers to inject arbitrary web script or HTML via an HTML l (no CVSS)
- [CVE-2002-1961](https://cve.now/CVE-2002-1961.md): Finjan Software SurfinGate 6.0 and 6.0 1 allows remote attackers to bypass URL access restrictions via a URL whose hostname portion uses a f (no CVSS)
- [CVE-2002-1962](https://cve.now/CVE-2002-1962.md): Finjan Software SurfinGate 6.0 and 6.0 1 allows remote attackers to bypass URL access restrictions via a URL with an IP address instead of a (no CVSS)
- [CVE-2002-1963](https://cve.now/CVE-2002-1963.md): Linux kernel 2.4.1 through 2.4.19 sets root's NR\_RESERVED\_FILES limit to 10 files, which allows local users to cause a denial of service (re (no CVSS)
- [CVE-2002-1964](https://cve.now/CVE-2002-1964.md): Unknown vulnerability in WesMo phpEventCalendar 1.1 allows remote attackers to execute arbitrary commands via unknown attack vectors. (no CVSS)
- [CVE-2002-1965](https://cve.now/CVE-2002-1965.md): Cross-site scripting (XSS) vulnerability in Errors.gsl in Imatix Xitami 2.5b4 and 2.5b5 allows remote attackers to inject arbitrary web scri (no CVSS)
- [CVE-2002-1966](https://cve.now/CVE-2002-1966.md): Directory traversal vulnerability in magiccard.cgi in My Postcards Platinum 5.0 and 6.0 allows remote attackers to read arbitrary files via (no CVSS)
- [CVE-2002-1967](https://cve.now/CVE-2002-1967.md): Buffer overflow in XiRCON 1.0 Beta 4 allows remote attackers to cause a denial of service (disconnect) via a long (1) ctcp, (2) primsg, (3) (no CVSS)
- [CVE-2002-1968](https://cve.now/CVE-2002-1968.md): Com21 DOXport 1100 series cable modem running firmware 2.1.1.106, and possibly other versions before 2.1.1.108.003, downloads a DOCSIS confi (no CVSS)
- [CVE-2002-1969](https://cve.now/CVE-2002-1969.md): Magic Notebook 1.0b and 1.1b allows remote attackers to cause a denial of service (crash) via an invalid username during login. (no CVSS)
- [CVE-2002-1970](https://cve.now/CVE-2002-1970.md): SnortCenter 0.9.5, when configured to push Snort rules, stores the rules in a temporary file with world-readable and world-writable permissi (no CVSS)
- [CVE-2002-1971](https://cve.now/CVE-2002-1971.md): The ping utility in networking\_utils.php in Sourcecraft Networking\_Utils 1.0 allows remote attackers to read arbitrary files via shell metac (no CVSS)
- [CVE-2002-1972](https://cve.now/CVE-2002-1972.md): Unknown vulnerability in Parallel port powerSwitch (aka pp\_powerSwitch) 0.1 does not properly enforce access controls, which allows local us (no CVSS)
- [CVE-2002-1973](https://cve.now/CVE-2002-1973.md): Buffer overflow in CHttpServer::OnParseError in the ISAPI extension (Isapi.cpp) when built using Microsoft Foundation Class (MFC) static lib (no CVSS)
- [CVE-2002-1974](https://cve.now/CVE-2002-1974.md): The FTP service in Zaurus PDAs SL-5000D and SL-5500 does not require authentication, which allows remote attackers to access the file system (no CVSS)
- [CVE-2002-1975](https://cve.now/CVE-2002-1975.md): Sharp Zaurus PDA SL-5000D and SL-5500 uses a salt of "A0" to encrypt the screen-locking password as stored in the Security.conf file, which (CVSS 5.5)
- [CVE-2002-1976](https://cve.now/CVE-2002-1976.md): ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was put in pr (no CVSS)
- [CVE-2002-1977](https://cve.now/CVE-2002-1977.md): Network Associates PGP 7.0.4 and 7.1 does not time out according to the value set in the "Passphrase Cache" option, which could allow attack (no CVSS)
- [CVE-2002-1978](https://cve.now/CVE-2002-1978.md): IPFilter 3.1.1 through 3.4.28 allows remote attackers to bypass firewall rules by sending a PASV command string as the argument of another c (no CVSS)
- [CVE-2002-1979](https://cve.now/CVE-2002-1979.md): WatchGuard SOHO products running firmware 5.1.6 and earlier, and Vclass/RSSA using 3.2 SP1 and earlier, allows remote attackers to bypass fi (no CVSS)
- [CVE-2002-1980](https://cve.now/CVE-2002-1980.md): Buffer overflow in Volume Manager daemon (vold) of Sun Solaris 2.5.1 through 8 allows local users to execute arbitrary code via unknown atta (no CVSS)
- [CVE-2002-1981](https://cve.now/CVE-2002-1981.md): Microsoft SQL Server 2000 through SQL Server 2000 SP2 allows the "public" role to execute the (1) sp\_MSSetServerProperties or (2) sp\_MSsetal (no CVSS)
- [CVE-2002-1982](https://cve.now/CVE-2002-1982.md): Directory traversal vulnerability in the list\_directory function in Icecast 1.3.12 allows remote attackers to determine if a directory exist (no CVSS)
- [CVE-2002-1983](https://cve.now/CVE-2002-1983.md): The timer implementation in QNX RTOS 6.1.0 allows local users to cause a denial of service (hang) and possibly execute arbitrary code by cre (no CVSS)
- [CVE-2002-1984](https://cve.now/CVE-2002-1984.md): Microsoft Internet Explorer 5.0.1 through 6.0 on Windows 2000 or Windows XP allows remote attackers to cause a denial of service (crash) via (no CVSS)
- [CVE-2002-1985](https://cve.now/CVE-2002-1985.md): iSMTP 5.0.1 allows remote attackers to cause a denial of service via a long "MAIL FROM" command, possibly triggering a buffer overflow. (no CVSS)
- [CVE-2002-1986](https://cve.now/CVE-2002-1986.md): Perception LiteServe 2.0 through 2.0.1 allows remote attackers to obtain the source code of CGI scripts via an HTTP request with a trailing (no CVSS)
- [CVE-2005-0201](https://cve.now/CVE-2005-0201.md): D-BUS (dbus) before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen o (no CVSS)
- [CVE-2005-2054](https://cve.now/CVE-2005-2054.md): Unknown vulnerability in RealPlayer 10 and 10.5 (6.0.12.1040-1069) and RealOne Player v1 and v2 allows remote attackers to overwrite arbitra (no CVSS)
- [CVE-2005-2055](https://cve.now/CVE-2005-2055.md): RealPlayer 8, 10, 10.5 (6.0.12.1040-1069), and Enterprise and RealOne Player v1 and v2 allows remote malicious web server to create an arbit (no CVSS)
- [CVE-2005-2056](https://cve.now/CVE-2005-2056.md): The Quantum archive decompressor in Clam AntiVirus (ClamAV) before 0.86.1 allows remote attackers to cause a denial of service (application (no CVSS)
- [CVE-2005-2057](https://cve.now/CVE-2005-2057.md): Multiple cross-site scripting (XSS) vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to inject arbitrary web (no CVSS)
- [CVE-2005-2058](https://cve.now/CVE-2005-2058.md): Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2005-2059](https://cve.now/CVE-2005-2059.md): Multiple cross-site request forgery (CSRF) vulnerabilities in (1) addaddress.php, (2) toggleignore.php, (3) removeignore.php, and (4) remove (no CVSS)
- [CVE-2005-2060](https://cve.now/CVE-2005-2060.md): Multiple HTTP Response Splitting vulnerabilities in (1) toggleshow.php, (2) togglecats.php, and (3) showprofile.php in Infopop UBB.Threads b (no CVSS)
- [CVE-2005-2061](https://cve.now/CVE-2005-2061.md): Infopop UBB.Threads before 6.5.2 Beta allows remote attackers to include arbitrary files via the language parameter in a cookie followed by (no CVSS)
- [CVE-2005-2062](https://cve.now/CVE-2005-2062.md): Multiple SQL injection vulnerabilities in ActiveBuyAndSell 6.2 allow remote attackers to execute arbitrary SQL commands via the catid parame (no CVSS)
- [CVE-2005-2063](https://cve.now/CVE-2005-2063.md): Multiple cross-site scripting (XSS) vulnerabilities in ActiveBuyAndSell 6.2 allow remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2005-2064](https://cve.now/CVE-2005-2064.md): Multiple cross-site scripting vulnerabilities in ASP Nuke 0.80 allow remote attackers to inject arbitrary web script or HTML via the (1) ema (no CVSS)
- [CVE-2005-2065](https://cve.now/CVE-2005-2065.md): HTTP response splitting vulnerability in language\_select.asp in ASP Nuke 0.80 allows remote attackers to spoof web content and poison web ca (no CVSS)
- [CVE-2005-2066](https://cve.now/CVE-2005-2066.md): SQL injection vulnerability in comment\_post.asp in ASP Nuke 0.80 allows remote attackers to execute arbitrary SQL statements via the TaskID (no CVSS)
- [CVE-2005-2067](https://cve.now/CVE-2005-2067.md): SQL injection vulnerability in article.asp in unknown versions of aspnuke allows remote attackers to execute arbitrary SQL commands via the (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-06-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.