# CVEs published 2005-07-01

24 CVEs were published on July 1, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2004-2144](https://cve.now/CVE-2004-2144.md): Baal Smart Forms before 3.2 allows remote attackers to bypass authentication and obtain system access via a direct request to regadmin.php. (no CVSS)
- [CVE-2004-2145](https://cve.now/CVE-2004-2145.md): SQL injection vulnerability in PD9 Software MegaBBS 2 and 2.1 allows remote attackers to execute arbitrary SQL commands via the (1) sortdir (no CVSS)
- [CVE-2004-2146](https://cve.now/CVE-2004-2146.md): CRLF injection vulnerability in PD9 Software MegaBBS 2 and 2.1 allows attackers to conduct HTTP response splitting attacks via the fid param (no CVSS)
- [CVE-2004-2147](https://cve.now/CVE-2004-2147.md): Unknown versions of Symantec Norton AntiVirus and Microsoft Outlook allow attackers to cause a denial of service (crash) via malformed e-mai (no CVSS)
- [CVE-2004-2148](https://cve.now/CVE-2004-2148.md): Unknown local vulnerability in the "change user" feature of Slava Astashonok Fprobe 1.0.5 and earlier has unknown impact and attack vectors. (no CVSS)
- [CVE-2004-2149](https://cve.now/CVE-2004-2149.md): Buffer overflow in the prepared statements API in libmysqlclient for MySQL 4.1.3 beta and 4.1.4 allows remote attackers to cause a denial of (no CVSS)
- [CVE-2004-2150](https://cve.now/CVE-2004-2150.md): Nettica Corporation INTELLIPEER Email Server 1.01 displays different error messages for valid and invalid account names, which allows remote (no CVSS)
- [CVE-2004-2151](https://cve.now/CVE-2004-2151.md): Chatman 1.1.1 RC1 and earlier allows remote attackers to cause a denial of service (memory consumption or application crash) via a very larg (no CVSS)
- [CVE-2004-2152](https://cve.now/CVE-2004-2152.md): Cross-site scripting (XSS) vulnerability in 'raw' page output mode for MediaWiki 1.3.4 and earlier allows remote attackers to inject arbitra (no CVSS)
- [CVE-2004-2153](https://cve.now/CVE-2004-2153.md): Multiple unknown vulnerabilities in Real Estate Management Software 1.0 have unknown impact and attack vectors. (no CVSS)
- [CVE-2005-0360](https://cve.now/CVE-2005-0360.md): The Microsoft Log Sink Class ActiveX control in pkmcore.dll is marked as "safe for scripting" for Internet Explorer, which allows remote att (no CVSS)
- [CVE-2005-0393](https://cve.now/CVE-2005-0393.md): The helper scripts for crip 3.5 do not properly use temporary files, which allows local users to have an unknown impact with unknown attack (no CVSS)
- [CVE-2005-1921](https://cve.now/CVE-2005-1921.md): Eval injection vulnerability in PEAR XML\_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 (no CVSS)
- [CVE-2005-2105](https://cve.now/CVE-2005-2105.md): Cisco IOS 12.2T through 12.4 allows remote attackers to bypass Authentication, Authorization, and Accounting (AAA) RADIUS authentication, if (no CVSS)
- [CVE-2005-2106](https://cve.now/CVE-2005-2106.md): Unknown vulnerability in Drupal 4.5.0 through 4.5.3, 4.6.0, and 4.6.1 allows remote attackers to execute arbitrary PHP code via a public com (no CVSS)
- [CVE-2005-2107](https://cve.now/CVE-2005-2107.md): Multiple cross-site scripting (XSS) vulnerabilities in post.php in WordPress 1.5.1.2 and earlier allow remote attackers to inject arbitrary (no CVSS)
- [CVE-2005-2108](https://cve.now/CVE-2005-2108.md): SQL injection vulnerability in XMLRPC server in WordPress 1.5.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2005-2109](https://cve.now/CVE-2005-2109.md): wp-login.php in WordPress 1.5.1.2 and earlier allows remote attackers to change the content of the forgotten password e-mail message via the (no CVSS)
- [CVE-2005-2110](https://cve.now/CVE-2005-2110.md): WordPress 1.5.1.2 and earlier allows remote attackers to obtain sensitive information via (1) a direct request to menu-header.php or a "1" v (no CVSS)
- [CVE-2005-2111](https://cve.now/CVE-2005-2111.md): login.cgi in Community Link Pro Web Editor allows remote attackers to execute arbitrary commands via the file parameter. (no CVSS)
- [CVE-2005-2112](https://cve.now/CVE-2005-2112.md): Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.0.11 and earlier allow remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2005-2113](https://cve.now/CVE-2005-2113.md): SQL injection vulnerability in the loginUser function in the XMLRPC server in XOOPS 2.0.11 and earlier allows remote attackers to execute ar (no CVSS)
- [CVE-2005-2114](https://cve.now/CVE-2005-2114.md): Mozilla 1.7.8, Firefox 1.0.4, Camino 0.8.4, Netscape 8.0.2, and K-Meleon 0.9, and possibly other products that use the Gecko engine, allow r (no CVSS)
- [CVE-2005-2115](https://cve.now/CVE-2005-2115.md): Soldier of Fortune II 1.02x and 1.03 allows remote attackers to cause a denial of service (server crash) via a large ID value in the ignore (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-07-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.