# CVEs published 2005-07-28

3 CVEs were published on July 28, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-2405](https://cve.now/CVE-2005-2405.md): Opera 8.01, when the "Arial Unicode MS" font (ARIALUNI.TTF) is installed, does not properly handle extended ASCII characters in the file dow (no CVSS)
- [CVE-2005-2406](https://cve.now/CVE-2005-2406.md): Opera 8.01 allows remote attackers to conduct cross-site scripting (XSS) attacks or modify which files are uploaded by tricking a user into (no CVSS)
- [CVE-2005-2407](https://cve.now/CVE-2005-2407.md): A design error in Opera 8.01 and earlier allows user-assisted attackers to execute arbitrary code by overlaying a malicious new window above (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-07-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.