# CVEs published 2005-07-20

8 CVEs were published on July 20, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-2327](https://cve.now/CVE-2005-2327.md): Cross-site scripting (XSS) vulnerability in e107 0.617 and earlier allows remote attackers to inject arbitrary web script or HTML via nested (no CVSS)
- [CVE-2005-2328](https://cve.now/CVE-2005-2328.md): PHP remote file inclusion vulnerability in im.php in Laffer 0.3.2.6 and 0.3.2.7 allows remote attackers to execute arbitrary PHP code via th (no CVSS)
- [CVE-2005-2329](https://cve.now/CVE-2005-2329.md): MRV Communications In-Reach LX-8000S, LX-4000S, and LX-1000S 3.5.0, when using SSH public key authentication, does not properly restrict acc (no CVSS)
- [CVE-2005-2330](https://cve.now/CVE-2005-2330.md): Directory traversal vulnerability in extras/update.php in osCommerce 2.2 allows remote attackers to read arbitrary files via (1) .. (no CVSS)
- [CVE-2005-2331](https://cve.now/CVE-2005-2331.md): PHP remote file inclusion vulnerability in display.php in MooseGallery allows remote attackers to execute arbitrary PHP code via the type pa (no CVSS)
- [CVE-2005-2332](https://cve.now/CVE-2005-2332.md): Cross-site scripting (XSS) vulnerability in PHPPageProtect 1.0.0a allows remote attackers to inject arbitrary web script or HTML via the use (no CVSS)
- [CVE-2005-2333](https://cve.now/CVE-2005-2333.md): Cross-site scripting (XSS) vulnerability in smilies\_popup.php in SEO-Board 1.0 allows remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2005-2334](https://cve.now/CVE-2005-2334.md): Y.SAK allows remote attackers to execute arbitrary commands via shell metacharacters in the $no variable to (1) w\_s3mbfm.cgi, (2) w\_s3adix.c (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-07-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.