# CVEs published 2005-07-13 28 CVEs were published on July 13, 2005: 0 critical, 0 high. Days are UTC. - [CVE-2005-2095](https://cve.now/CVE-2005-2095.md): options\_identities.php in SquirrelMail 1.4.4 and earlier uses the extract function to process the $\_POST variable, which allows remote attac (no CVSS) - [CVE-2005-2248](https://cve.now/CVE-2005-2248.md): Directory traversal vulnerability in DownloadProtect before 1.0.3 allows remote attackers to read files above the download folder. (no CVSS) - [CVE-2005-2249](https://cve.now/CVE-2005-2249.md): Multiple unknown vulnerabilities in Jinzora 2.0.1 have unknown impact and attack vectors, possibly involving a PHP file inclusion vulnerabil (no CVSS) - [CVE-2005-2250](https://cve.now/CVE-2005-2250.md): Buffer overflow in Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary code via a long (no CVSS) - [CVE-2005-2251](https://cve.now/CVE-2005-2251.md): PHP remote file inclusion vulnerability in secure.php in PHPSecurePages (phpSP) 0.28beta and earlier allows remote attackers to execute arbi (no CVSS) - [CVE-2005-2252](https://cve.now/CVE-2005-2252.md): PhpAuction 2.5 allows remote attackers to bypass authentication and gain privileges as another user by setting the PHPAUCTION\_RM\_ID cookie t (no CVSS) - [CVE-2005-2253](https://cve.now/CVE-2005-2253.md): SQL injection vulnerability in PhpAuction 2.5 allow remote attackers to modify SQL queries via the category parameter to adsearch.php. (no CVSS) - [CVE-2005-2254](https://cve.now/CVE-2005-2254.md): Multiple cross-site scripting (XSS) vulnerabilities in PhpAuction 2.5 allow remote attackers to inject arbitrary web script or HTML via the (no CVSS) - [CVE-2005-2255](https://cve.now/CVE-2005-2255.md): Directory traversal vulnerability in PhpAuction 2.5 allows remote attackers to read arbitrary files, include local PHP files, or obtain sens (no CVSS) - [CVE-2005-2256](https://cve.now/CVE-2005-2256.md): Encoded directory traversal vulnerability in phpPgAdmin 3.1 to 3.5.3 allows remote attackers to access arbitrary files via "%2e%2e%2f" (enco (no CVSS) - [CVE-2005-2257](https://cve.now/CVE-2005-2257.md): The saveProfile function in PhpSlash 0.8.0 allows remote attackers to modify arbitrary profiles and gain privileges by modifying the author\_ (no CVSS) - [CVE-2005-2258](https://cve.now/CVE-2005-2258.md): PHP remote file inclusion vulnerability in photolist.inc.php in Squito Gallery 1.33 allows remote attackers to execute arbitrary code via th (no CVSS) - [CVE-2005-2259](https://cve.now/CVE-2005-2259.md): The dispallclosed2 function in dispallclosed.pl for multiple USANet Creations products, including (1) USANet Shopping Mall Software, (2) Dom (no CVSS) - [CVE-2005-2260](https://cve.now/CVE-2005-2260.md): The browser user interface in Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 does not properly distinguish between u (no CVSS) - [CVE-2005-2261](https://cve.now/CVE-2005-2261.md): Firefox before 1.0.5, Thunderbird before 1.0.5, Mozilla before 1.7.9, Netscape 8.0.2, and K-Meleon 0.9 runs XBL scripts even when Javascript (no CVSS) - [CVE-2005-2262](https://cve.now/CVE-2005-2262.md): Firefox 1.0.3 and 1.0.4, and Netscape 8.0.2, allows remote attackers to execute arbitrary code by tricking the user into using the "Set As W (no CVSS) - [CVE-2005-2263](https://cve.now/CVE-2005-2263.md): The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a callback function in (no CVSS) - [CVE-2005-2264](https://cve.now/CVE-2005-2264.md): Firefox before 1.0.5 allows remote attackers to steal sensitive information by opening a malicious link in the Firefox sidebar using the \_se (no CVSS) - [CVE-2005-2265](https://cve.now/CVE-2005-2265.md): Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of service (access violatio (no CVSS) - [CVE-2005-2266](https://cve.now/CVE-2005-2266.md): Firefox before 1.0.5 and Mozilla before 1.7.9 allows a child frame to call top.focus and other methods in a parent frame, even when the pare (no CVSS) - [CVE-2005-2267](https://cve.now/CVE-2005-2267.md): Firefox before 1.0.5 allows remote attackers to steal information and possibly execute arbitrary code by using standalone applications such (no CVSS) - [CVE-2005-2268](https://cve.now/CVE-2005-2268.md): Firefox before 1.0.5 and Mozilla before 1.7.9 does not clearly associate a Javascript dialog box with the web page that generated it, which (no CVSS) - [CVE-2005-2269](https://cve.now/CVE-2005-2269.md): Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 does not properly verify the associated types of DOM node names within the co (no CVSS) - [CVE-2005-2270](https://cve.now/CVE-2005-2270.md): Firefox before 1.0.5 and Mozilla before 1.7.9 does not properly clone base objects, which allows remote attackers to execute arbitrary code (no CVSS) - [CVE-2005-2271](https://cve.now/CVE-2005-2271.md): iCab 2.9.8 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a (no CVSS) - [CVE-2005-2272](https://cve.now/CVE-2005-2272.md): Safari version 2.0 (412) does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attacke (no CVSS) - [CVE-2005-2273](https://cve.now/CVE-2005-2273.md): Opera 7.x and 8 before 8.01 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote atta (no CVSS) - [CVE-2005-2274](https://cve.now/CVE-2005-2274.md): Microsoft Internet Explorer 6.0 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2005-07-13 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.