# CVEs published 2005-07-12

35 CVEs were published on July 12, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-0564](https://cve.now/CVE-2005-0564.md): Stack-based buffer overflow in Microsoft Word 2000 and Word 2002, and Microsoft Works Suites 2000 through 2004, might allow remote attackers (no CVSS)
- [CVE-2005-1219](https://cve.now/CVE-2005-1219.md): Buffer overflow in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code via an image with cra (no CVSS)
- [CVE-2005-1859](https://cve.now/CVE-2005-1859.md): Unknown vulnerability in arshell in the Array Service (arrayd) for SGI ProPack 3 with SP 5 and 6, and SGI ProPack 4, allows local users to e (no CVSS)
- [CVE-2005-2215](https://cve.now/CVE-2005-2215.md): Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.x before 1.4.6 and 1.5 before 1.5beta3 allows remote attackers to inject ar (no CVSS)
- [CVE-2005-2216](https://cve.now/CVE-2005-2216.md): PHP remote file inclusion vulnerability in gals.php in PhotoGal Photo Gallery 1.5 and earlier allows remote attackers to execute arbitrary c (no CVSS)
- [CVE-2005-2217](https://cve.now/CVE-2005-2217.md): Dansie Shopping Cart stores the vars.dat file under the web root with insufficient access control, which might allow remote attackers to obt (no CVSS)
- [CVE-2005-2219](https://cve.now/CVE-2005-2219.md): Hosting Controller 6.1 Hotfix 2.1 allows remote authenticated users to perform unauthorized actions, such as modifying the credit limit, via (no CVSS)
- [CVE-2005-2220](https://cve.now/CVE-2005-2220.md): Dragonfly Commerce allows remote attackers to change a product price by modifying the x\_DragonflyCartProductPrice hidden field to (1) dc\_Cat (no CVSS)
- [CVE-2005-2221](https://cve.now/CVE-2005-2221.md): Multiple SQL injection vulnerabilities in Dragonfly Commerce allows remote attackers to modify SQL statements and possibly execute arbitrary (no CVSS)
- [CVE-2005-2222](https://cve.now/CVE-2005-2222.md): Unknown vulnerability in the HTTPMail service in MailEnable Professional before 1.6 has unknown impact and attack vectors. (no CVSS)
- [CVE-2005-2223](https://cve.now/CVE-2005-2223.md): Unknown vulnerability in the SMTP service in MailEnable Standard before 1.9 and Professional before 1.6 allows remote attackers to cause a d (no CVSS)
- [CVE-2005-2224](https://cve.now/CVE-2005-2224.md): aspnet\_wp.exe in Microsoft ASP.NET web services allows remote attackers to cause a denial of service (CPU consumption from infinite loop) vi (no CVSS)
- [CVE-2005-2225](https://cve.now/CVE-2005-2225.md): Microsoft MSN Messenger allows remote attackers to cause a denial of service via a plaintext message containing the ".pif" string, which is (no CVSS)
- [CVE-2005-2226](https://cve.now/CVE-2005-2226.md): Microsoft Outlook Express 6.0 leaks the default news server account when a user responds to a "watched" conversation thread, which could all (no CVSS)
- [CVE-2005-2227](https://cve.now/CVE-2005-2227.md): Softiacom wMailserver 1.0 stores passwords in plaintext in the Darsite\\MAILSRV\\Admin key, which allows local users to gain administrator pri (no CVSS)
- [CVE-2005-2228](https://cve.now/CVE-2005-2228.md): Web Wiz Forums 7.9 and 8.0 allows remote attackers to view message titles of a hidden forum. (no CVSS)
- [CVE-2005-2229](https://cve.now/CVE-2005-2229.md): Blog Torrent 0.92 and earlier stores sensitive files under the web document root in the (1) data or (2) torrents directories with insufficie (no CVSS)
- [CVE-2005-2230](https://cve.now/CVE-2005-2230.md): Electronic Mail Operator (elmo) 1.3.2-r1 and earlier creates the elmostats temporary file insecurely, which allows local users to overwrite (no CVSS)
- [CVE-2005-2231](https://cve.now/CVE-2005-2231.md): High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files. (no CVSS)
- [CVE-2005-2232](https://cve.now/CVE-2005-2232.md): Buffer overflow in invscout in IBM AIX 5.1.0 through 5.3.0 might allow local users to execute arbitrary code via a long command line argumen (no CVSS)
- [CVE-2005-2233](https://cve.now/CVE-2005-2233.md): Buffer overflow in multiple "p" commands in IBM AIX 5.1, 5.2 and 5.3 might allow local users to execute arbitrary code via long command line (no CVSS)
- [CVE-2005-2234](https://cve.now/CVE-2005-2234.md): Buffer overflow in the getlvname command in IBM AIX 5.1, 5.2 and 5.3, might allow local users to execute arbitrary code via long command lin (no CVSS)
- [CVE-2005-2235](https://cve.now/CVE-2005-2235.md): Buffer overflow in the diagTasksWebSM command in IBM AIX 5.1, 5.2 and 5.3, might allow local users to execute arbitrary code via long comman (no CVSS)
- [CVE-2005-2236](https://cve.now/CVE-2005-2236.md): Format string vulnerability in the paginit command in IBM AIX 5.3, and possibly other versions, might allow local users to execute arbitrary (no CVSS)
- [CVE-2005-2237](https://cve.now/CVE-2005-2237.md): Format string vulnerability in the swcons command in IBM AIX 5.3, and possibly other versions, might allow local users to execute arbitrary (no CVSS)
- [CVE-2005-2238](https://cve.now/CVE-2005-2238.md): ftpd in IBM AIX 5.1, 5.2 and 5.3 allows remote authenticated users to cause a denial of service (port exhaustion and memory consumption) by (no CVSS)
- [CVE-2005-2239](https://cve.now/CVE-2005-2239.md): oftpd 0.3.7 allows remote attackers to cause a denial of service via a USER command with a large number of null (\\0) characters. (no CVSS)
- [CVE-2005-2240](https://cve.now/CVE-2005-2240.md): xpvm.tcl in xpvm 1.2.5 allows local users to overwrite arbitrary files via a symlink attack on the xpvm.trace.$user temporary file. (no CVSS)
- [CVE-2005-2241](https://cve.now/CVE-2005-2241.md): Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 does not quickly time out R (no CVSS)
- [CVE-2005-2242](https://cve.now/CVE-2005-2242.md): Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 allows remote attackers to (no CVSS)
- [CVE-2005-2243](https://cve.now/CVE-2005-2243.md): Memory leak in inetinfo.exe in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3) (no CVSS)
- [CVE-2005-2244](https://cve.now/CVE-2005-2244.md): The aupair service (aupair.exe) in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4. (no CVSS)
- [CVE-2005-2245](https://cve.now/CVE-2005-2245.md): Unknown vulnerability in F5 BIG-IP 9.0.2 through 9.1 allows attackers to "subvert the authentication of SSL transactions," via unknown attac (no CVSS)
- [CVE-2005-2246](https://cve.now/CVE-2005-2246.md): Multiple PHP remote file inclusion vulnerabilities in iPhotoAlbum 1.1 allow remote attackers to execute arbitrary code via the (1) doc\_path (no CVSS)
- [CVE-2005-2247](https://cve.now/CVE-2005-2247.md): Multiple unknown vulnerabilities in Moodle before 1.5.1 have unknown impact and attack vectors. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-07-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.