# CVEs published 2005-07-19

58 CVEs were published on July 19, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2004-2258](https://cve.now/CVE-2004-2258.md): Xconfig in Hummingbird Exceed before 9.0.0.1, when the Screen Definition is password-protected, allows local users to access certain options (no CVSS)
- [CVE-2004-2259](https://cve.now/CVE-2004-2259.md): vsftpd before 1.2.2, when under heavy load, allows attackers to cause a denial of service (crash) via a SIGCHLD signal during a malloc or fr (no CVSS)
- [CVE-2004-2260](https://cve.now/CVE-2004-2260.md): Opera Browser 7.23, and other versions before 7.50, updates the address bar as soon as the user clicks a link, which allows remote attackers (no CVSS)
- [CVE-2004-2261](https://cve.now/CVE-2004-2261.md): Cross-site scripting (XSS) vulnerability in e107 allows remote attackers to inject arbitrary script or HTML via the "login name/author" fiel (no CVSS)
- [CVE-2004-2262](https://cve.now/CVE-2004-2262.md): ImageManager in e107 before 0.617 does not properly check the types of uploaded files, which allows remote attackers to execute arbitrary co (no CVSS)
- [CVE-2004-2263](https://cve.now/CVE-2004-2263.md): SQL injection vulnerability in the valid function in fr\_left.php in PlaySMS 0.7 and earlier allows remote attackers to modify SQL statements (no CVSS)
- [CVE-2004-2264](https://cve.now/CVE-2004-2264.md): Format string bug in the open\_altfile function in filename.c for GNU less 382, 381, and 358 might allow local users to cause a denial of ser (no CVSS)
- [CVE-2004-2265](https://cve.now/CVE-2004-2265.md): UUDeview 0.5.20 and earlier handles temporary files insecurely during decoding, with unknown attack vectors and impact. (no CVSS)
- [CVE-2004-2266](https://cve.now/CVE-2004-2266.md): SQL injection vulnerability in Ansel 2.1 and earlier allows remote attackers to modify SQL statements via the image parameter. (no CVSS)
- [CVE-2004-2267](https://cve.now/CVE-2004-2267.md): Cross-site scripting (XSS) vulnerability in Ansel 2.1 and earlier allows remote attackers to inject arbitrary HTML or web script via the alb (no CVSS)
- [CVE-2004-2268](https://cve.now/CVE-2004-2268.md): PimenGest2 before 1.1.1 allows remote attackers to obtain the database password via debug information in rowLatex.inc.php. (no CVSS)
- [CVE-2004-2269](https://cve.now/CVE-2004-2269.md): Stack-based buffer overflow in pads.c in Passive Asset Detection System (Pads) might allow local users to execute arbitrary code via a long (no CVSS)
- [CVE-2004-2270](https://cve.now/CVE-2004-2270.md): Unknown vulnerability in IBM Parallel Environment (PE) 3.2 and 4.1 allows attackers to execute arbitrary commands as root via unknown vector (no CVSS)
- [CVE-2004-2271](https://cve.now/CVE-2004-2271.md): Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request. (no CVSS)
- [CVE-2004-2272](https://cve.now/CVE-2004-2272.md): Buffer overflow in the sockFinger\_DataArrival function in efFingerD 0.2.12 allows remote attackers to cause a denial of service (daemon cras (no CVSS)
- [CVE-2004-2273](https://cve.now/CVE-2004-2273.md): efFingerD 0.2.12 allows remote attackers to cause a denial of service (daemon crash) via a packet with a single byte, which triggers a "Wron (no CVSS)
- [CVE-2004-2274](https://cve.now/CVE-2004-2274.md): Unknown vulnerability in Jigsaw before 2.2.4 has unknown impact and attack vectors, possibly related to the parsing of the URI. (no CVSS)
- [CVE-2004-2275](https://cve.now/CVE-2004-2275.md): i-mall.cgi in I-Mall Commerce allows remote attackers to execute arbitrary commands via shell metacharacters via the p parameter. (no CVSS)
- [CVE-2004-2276](https://cve.now/CVE-2004-2276.md): F-Secure Anti-Virus 5.41 and 5.42 on Windows, Client Security 5.50 and 5.52, 4.60 for Samba Servers, and 4.52 and earlier for Linux does not (no CVSS)
- [CVE-2004-2277](https://cve.now/CVE-2004-2277.md): Buffer overflow in aGSM Half-Life client allows remote Half-Life servers to cause a denial of service (crash) and possibly execute arbitrary (no CVSS)
- [CVE-2004-2278](https://cve.now/CVE-2004-2278.md): Unknown cross-site scripting (XSS) vulnerability in the web GUI in vHost before 3.10r1 has unknown impact and attack vectors. (no CVSS)
- [CVE-2004-2279](https://cve.now/CVE-2004-2279.md): Cross-site scripting (XSS) vulnerability in Invision Power Board 1.3 Final allows remote attackers to execute arbitrary script as other user (no CVSS)
- [CVE-2004-2280](https://cve.now/CVE-2004-2280.md): Buffer overflow in IBM Lotus Notes 6.5.x before 6.5.3 and 6.0.x before 6.0.5 allows remote attackers to cause a denial of service (crash) vi (no CVSS)
- [CVE-2004-2281](https://cve.now/CVE-2004-2281.md): Multiple unknown vulnerabilities in IBM Lotus Notes 6.5.x before 6.5.4 and 6.0.x before 6.0.5 have unknown impact and attack vectors, relate (no CVSS)
- [CVE-2004-2282](https://cve.now/CVE-2004-2282.md): DansGuardian before 2.7.7-2 allows remote attackers to bypass URL filters via a ".." in the request. (no CVSS)
- [CVE-2004-2283](https://cve.now/CVE-2004-2283.md): Unknown vulnerability in DansGuardian before 2.6.1-13 allows remote attackers to bypass URL filters via a crafted request that causes a page (no CVSS)
- [CVE-2004-2284](https://cve.now/CVE-2004-2284.md): The read\_list\_from\_file function in vacation.pl for OpenWebmail before 2.32 20040629 allows remote attackers to execute arbitrary commands v (no CVSS)
- [CVE-2005-1530](https://cve.now/CVE-2005-1530.md): Sophos Anti-Virus 5.0.1, with "Scan inside archive files" enabled, allows remote attackers to cause a denial of service (CPU consumption by (no CVSS)
- [CVE-2005-1850](https://cve.now/CVE-2005-1850.md): Certain contributed scripts for ekg Gadu Gadu client 1.5 and earlier create temporary files insecurely, with unknown impact and attack vecto (no CVSS)
- [CVE-2005-1851](https://cve.now/CVE-2005-1851.md): A certain contributed script for ekg Gadu Gadu client 1.5 and earlier allows attackers to execute shell commands via unknown attack vectors. (no CVSS)
- [CVE-2005-2196](https://cve.now/CVE-2005-2196.md): The Apple AirPort card uses a default WEP key when not connected to a known or trusted network, which can cause it to automatically connect (no CVSS)
- [CVE-2005-2297](https://cve.now/CVE-2005-2297.md): Stack-based buffer overflow in TreeAction.do in Sybase EAServer 4.2.5 through 5.2 allows remote authenticated users to execute arbitrary cod (no CVSS)
- [CVE-2005-2298](https://cve.now/CVE-2005-2298.md): BitDefender Engine 1.6.1 and earlier does not properly scan all attachments, which allows remote attackers to bypass virus scanning via begi (no CVSS)
- [CVE-2005-2299](https://cve.now/CVE-2005-2299.md): Multiple cross-site scripting (XSS) vulnerabilities in Simple Message Board Version 2.0 Beta 1 allow remote attackers to inject arbitrary we (no CVSS)
- [CVE-2005-2300](https://cve.now/CVE-2005-2300.md): Skype 1.1.0.20 and earlier allows local users to overwrite arbitrary files via a symlink attack on the skype\_profile.jpg temporary file. (no CVSS)
- [CVE-2005-2301](https://cve.now/CVE-2005-2301.md): PowerDNS before 2.9.18, when running with an LDAP backend, does not properly escape LDAP queries, which allows remote attackers to cause a d (no CVSS)
- [CVE-2005-2302](https://cve.now/CVE-2005-2302.md): PowerDNS before 2.9.18, when allowing recursion to a restricted range of IP addresses, does not properly handle questions from clients that (no CVSS)
- [CVE-2005-2304](https://cve.now/CVE-2005-2304.md): Microsoft MSN Messenger 9.0 and Internet Explorer 6.0 allows remote attackers to cause a denial of service (crash) via an image with an ICC (no CVSS)
- [CVE-2005-2305](https://cve.now/CVE-2005-2305.md): DG Remote Control Server 1.6.2 allows remote attackers to cause a denial of service (crash or CPU consumption) and possibly execute arbitrar (no CVSS)
- [CVE-2005-2306](https://cve.now/CVE-2005-2306.md): Race condition in Macromedia JRun 4.0, ColdFusion MX 6.1 and 7.0, when under heavy load, causes JRun to assign a duplicate authentication to (no CVSS)
- [CVE-2005-2307](https://cve.now/CVE-2005-2307.md): netman.dll in Microsoft Windows Connections Manager Library allows local users to cause a denial of service (Network Connections Service cra (no CVSS)
- [CVE-2005-2308](https://cve.now/CVE-2005-2308.md): The JPEG decoder in Microsoft Internet Explorer allows remote attackers to cause a denial of service (CPU consumption or crash) and possibly (no CVSS)
- [CVE-2005-2309](https://cve.now/CVE-2005-2309.md): Opera 8.01 allows remote attackers to cause a denial of service (CPU consumption) via a crafted JPEG image, as demonstrated using random.jpg (no CVSS)
- [CVE-2005-2310](https://cve.now/CVE-2005-2310.md): Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute arbitrary code via an M (no CVSS)
- [CVE-2005-2311](https://cve.now/CVE-2005-2311.md): SMS 1.9.2m and earlier allows local users to overwrite arbitrary files via a symlink attack on the (1) request1 or (2) request2 temporary fi (no CVSS)
- [CVE-2005-2312](https://cve.now/CVE-2005-2312.md): management.php in Realnode Emilda 1.2.2 and earlier allows remote attackers to perform actions as other users by modifying the user\_id param (no CVSS)
- [CVE-2005-2313](https://cve.now/CVE-2005-2313.md): Check Point SecuRemote NG with Application Intelligence R54 allows attackers to obtain credentials and gain privileges via unknown attack ve (no CVSS)
- [CVE-2005-2314](https://cve.now/CVE-2005-2314.md): inc.login.php in PHPsFTPd 0.2 through 0.4 allows remote attackers to obtain the administrator's username and password by setting the do\_logi (no CVSS)
- [CVE-2005-2317](https://cve.now/CVE-2005-2317.md): Shorewall 2.4.x before 2.4.1, 2.2.x before 2.2.5, and 2.0.x before 2.0.17, when MACLIST\_TTL is greater than 0 or MACLIST\_DISPOSITION is set (no CVSS)
- [CVE-2005-2318](https://cve.now/CVE-2005-2318.md): Cross-site scripting (XSS) vulnerability in showerr.asp in DVBBS 7.1 SP2 allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2005-2319](https://cve.now/CVE-2005-2319.md): PHP remote file include vulnerability in Yawp library 1.0.6 and earlier, as used in YaWiki and possibly other products, allows remote attack (no CVSS)
- [CVE-2005-2320](https://cve.now/CVE-2005-2320.md): WebCalendar before 1.0.0 does not properly restrict access to assistant\_edit.php, which allows remote attackers to gain privileges. (no CVSS)
- [CVE-2005-2321](https://cve.now/CVE-2005-2321.md): PHP remote file inclusion vulnerability in CaLogic 1.2.2 allows remote attackers to execute arbitrary code via the CLPATH parameter to (1) c (no CVSS)
- [CVE-2005-2322](https://cve.now/CVE-2005-2322.md): Cross-site scripting (XSS) vulnerability in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allows remote attackers (no CVSS)
- [CVE-2005-2323](https://cve.now/CVE-2005-2323.md): Multiple SQL injection vulnerabilities in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allow remote attackers to (no CVSS)
- [CVE-2005-2324](https://cve.now/CVE-2005-2324.md): Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2005-2325](https://cve.now/CVE-2005-2325.md): Clever Copy 2.0 and 2.0a allows remote attackers to obtain the full path of the web root via a direct request to (1) ticker.php, (2) menu.ph (no CVSS)
- [CVE-2005-2326](https://cve.now/CVE-2005-2326.md): Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to inject arbitrary web script or HTML via the (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-07-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.