# CVEs published 2005-06-30

27 CVEs were published on June 30, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2004-2138](https://cve.now/CVE-2004-2138.md): Cross-site scripting (XSS) vulnerability in AWSguest.php in AllWebScripts MySQLGuest allows remote attackers to inject arbitrary HTML and PH (no CVSS)
- [CVE-2004-2139](https://cve.now/CVE-2004-2139.md): Unknown vulnerability in Adminedit.pl YaBB 1 Gold before 1.3.2 allows attackers to execute arbitrary code via settings.pl. (no CVSS)
- [CVE-2004-2140](https://cve.now/CVE-2004-2140.md): CRLF injection vulnerability in YaBB 1 Gold before 1.3.2 allows remote attackers to modify text file contents via the subject variable. (no CVSS)
- [CVE-2004-2142](https://cve.now/CVE-2004-2142.md): Unknown vulnerability in the remote tape support (remote.c) in the RMT client for Jorg Schilling sdd 1.28 and 1.31 has unknown impact and at (no CVSS)
- [CVE-2004-2143](https://cve.now/CVE-2004-2143.md): SQL injection vulnerability in the ReMOSitory Server add-on module to Mambo Portal 4.5.1 (1.09) and earlier allows remote attackers to execu (no CVSS)
- [CVE-2005-1762](https://cve.now/CVE-2005-1762.md): The ptrace call in the Linux kernel 2.6.8.1 and 2.6.10 for the AMD64 platform allows local users to cause a denial of service (kernel crash) (no CVSS)
- [CVE-2005-1765](https://cve.now/CVE-2005-1765.md): syscall in the Linux kernel 2.6.8.1 and 2.6.10 for the AMD64 platform, when running in 32-bit compatibility mode, allows local users to caus (no CVSS)
- [CVE-2005-1922](https://cve.now/CVE-2005-1922.md): The MS-Expand file handling in Clam AntiVirus (ClamAV) before 0.86 allows remote attackers to cause a denial of service (file descriptor and (no CVSS)
- [CVE-2005-1923](https://cve.now/CVE-2005-1923.md): The ENSURE\_BITS macro in mszipd.c for Clam AntiVirus (ClamAV) 0.83, and other versions vefore 0.86, allows remote attackers to cause a denia (no CVSS)
- [CVE-2005-1931](https://cve.now/CVE-2005-1931.md): GoodTech SMTP Server 5.14 allows remote attackers to cause a denial of service (application crash) via a RCPT TO command with an invalid arg (no CVSS)
- [CVE-2005-1932](https://cve.now/CVE-2005-1932.md): Lpanel 1.59 and earlier, and other versions before 1.597, allows remote authenticated users to modify certain critical variables and (1) mod (no CVSS)
- [CVE-2005-2019](https://cve.now/CVE-2005-2019.md): ipfw in FreeBSD 5.4, when running on Symmetric Multi-Processor (SMP) or Uni Processor (UP) systems with the PREEMPTION kernel option enabled (no CVSS)
- [CVE-2005-2068](https://cve.now/CVE-2005-2068.md): FreeBSD 4.x through 4.11 and 5.x through 5.4 allows remote attackers to modify certain TCP options via a TCP packet with the SYN flag set fo (no CVSS)
- [CVE-2005-2081](https://cve.now/CVE-2005-2081.md): Stack-based buffer overflow in the function that parses commands in Asterisk 1.0.7, when the 'write = command' option is enabled, allows rem (no CVSS)
- [CVE-2005-2082](https://cve.now/CVE-2005-2082.md): im\_trbbs.cgi in imTRSET 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the df parameter. (no CVSS)
- [CVE-2005-2083](https://cve.now/CVE-2005-2083.md): Format string vulnerability in IMAP4 in IA eMailServer Corporate Edition 5.2.2 build 1051 allows remote attackers to cause a denial of servi (no CVSS)
- [CVE-2005-2084](https://cve.now/CVE-2005-2084.md): Cross-site scripting (XSS) vulnerability in SearchResults.aspx in Community Forum allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2005-2085](https://cve.now/CVE-2005-2085.md): Buffer overflow in Inframail Advantage Server Edition 6.0 through 6.7 allows remote attackers to cause a denial of service (process crash) v (no CVSS)
- [CVE-2005-2086](https://cve.now/CVE-2005-2086.md): PHP remote file inclusion vulnerability in viewtopic.php in phpBB 2.0.15 and earlier allows remote attackers to execute arbitrary PHP code. (no CVSS)
- [CVE-2005-2087](https://cve.now/CVE-2005-2087.md): Internet Explorer 5.01 SP4 up to 6 on various Windows operating systems, including IE 6.0.2900.2180 on Windows XP, allows remote attackers t (no CVSS)
- [CVE-2005-2088](https://cve.now/CVE-2005-2088.md): The Apache HTTP server before 1.3.34, and 2.0.x before 2.0.55, when acting as an HTTP proxy, allows remote attackers to poison the web cache (no CVSS)
- [CVE-2005-2089](https://cve.now/CVE-2005-2089.md): Microsoft IIS 5.0 and 6.0 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attac (no CVSS)
- [CVE-2005-2090](https://cve.now/CVE-2005-2090.md): Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application fi (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2005-2091](https://cve.now/CVE-2005-2091.md): IBM WebSphere 5.1 and WebSphere 5.0 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct (no CVSS)
- [CVE-2005-2092](https://cve.now/CVE-2005-2092.md): BEA Systems WebLogic 8.1 SP1 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS at (no CVSS)
- [CVE-2005-2093](https://cve.now/CVE-2005-2093.md): Oracle 9i Application Server (Oracle9iAS) 9.0.2 allows remote attackers to poison the web cache, bypass web application firewall protection, (no CVSS)
- [CVE-2005-2094](https://cve.now/CVE-2005-2094.md): Sun SunONE web server 6.1 SP1 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-06-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.