# CVEs published 2005-07-11

22 CVEs were published on July 11, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-1768](https://cve.now/CVE-2005-1768.md): Race condition in the ia32 compatibility code for the execve system call in Linux kernel 2.4 before 2.4.31 and 2.6 before 2.6.6 allows local (no CVSS)
- [CVE-2005-1848](https://cve.now/CVE-2005-1848.md): The dhcpcd DHCP client before 1.3.22 allows remote attackers to cause a denial of service (daemon crash) via unknown vectors that cause an o (no CVSS)
- [CVE-2005-2150](https://cve.now/CVE-2005-2150.md): Windows NT 4.0 and Windows 2000 before URP1 for Windows 2000 SP4 does not properly prevent NULL sessions from accessing certain alternate na (no CVSS)
- [CVE-2005-2170](https://cve.now/CVE-2005-2170.md): The LCF component (lcfd) in IBM Tivoli Management Framework Endpoint allows remote attackers to cause a denial of service (process exit and (no CVSS)
- [CVE-2005-2197](https://cve.now/CVE-2005-2197.md): SQL injection vulnerability in sql.cls.php in Id Board 1.1.3 allows remote attackers to modify SQL queries, as demonstrated using the f para (no CVSS)
- [CVE-2005-2198](https://cve.now/CVE-2005-2198.md): PHP remote file inclusion vulnerability in lang.php in SPiD before 1.3.1 allows remote attackers to execute arbitrary code via the lang\_path (no CVSS)
- [CVE-2005-2199](https://cve.now/CVE-2005-2199.md): PHP remote file inclusion vulnerability in inc/functions.inc.php in PPA web photo gallery 0.5.6 allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2005-2200](https://cve.now/CVE-2005-2200.md): Multiple unknown vulnerabilities in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, version 0.001.04.044 thr (no CVSS)
- [CVE-2005-2201](https://cve.now/CVE-2005-2201.md): Unknown vulnerability in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, version 0.001.04.044 through 0.001. (no CVSS)
- [CVE-2005-2202](https://cve.now/CVE-2005-2202.md): Cross-site scripting (XSS) vulnerability in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, version 0.001.04 (no CVSS)
- [CVE-2005-2203](https://cve.now/CVE-2005-2203.md): login.php in phpWishlist before 0.1.15 allows remote attackers to bypass authentication via a direct request to admin.php. (no CVSS)
- [CVE-2005-2204](https://cve.now/CVE-2005-2204.md): Cross-site scripting (XSS) vulnerability in Computer Associates (CA) eTrust SiteMinder 5.5, when the "CSSChecking" parameter is set to "NO," (no CVSS)
- [CVE-2005-2205](https://cve.now/CVE-2005-2205.md): The ReadLog function in kaiseki.cgi in pngren allows remote attackers to execute arbitrary commands via shell metacharacters in the query st (no CVSS)
- [CVE-2005-2206](https://cve.now/CVE-2005-2206.md): Multiple SQL injection vulnerabilities in CartWIZ allow remote attackers to modify SQL statements via the (1) idProduct parameter to tellAFr (no CVSS)
- [CVE-2005-2207](https://cve.now/CVE-2005-2207.md): Cross-site scripting (XSS) vulnerability in store/login.asp in CartWIZ allows remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2005-2208](https://cve.now/CVE-2005-2208.md): PrivaShare 1.1b allows remote attackers to cause a denial of service (crash) via a malformed message. (no CVSS)
- [CVE-2005-2209](https://cve.now/CVE-2005-2209.md): Capturix ScanShare 1.06 build 50 stores sensitive information such as the password in cleartext in capturixss\_cfg.ini, which is readable by (no CVSS)
- [CVE-2005-2210](https://cve.now/CVE-2005-2210.md): Stack-based buffer overflow in Internet Download Manager 4.05 allows remote attackers to execute arbitrary code via a long URL. (no CVSS)
- [CVE-2005-2211](https://cve.now/CVE-2005-2211.md): Backup Manager 0.5.8a creates temporary files insecurely, which allows local users to conduct unauthorized file operations when a user is bu (no CVSS)
- [CVE-2005-2212](https://cve.now/CVE-2005-2212.md): Backup Manager 0.5.8a creates an archive repository with world readable and writable permissions, which allows attackers to modify or read t (no CVSS)
- [CVE-2005-2213](https://cve.now/CVE-2005-2213.md): Buffer overflow in the mms\_interp\_header function in mms.c in MMS Ripper before 0.6.4 might allow remote attackers to execute arbitrary code (no CVSS)
- [CVE-2005-2214](https://cve.now/CVE-2005-2214.md): apt-setup in Debian GNU/Linux installs the apt.conf file with insecure permissions, which allows local users to obtain sensitive information (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-07-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.