# CVEs published 2005-08-07

8 CVEs were published on August 7, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-2482](https://cve.now/CVE-2005-2482.md): The StateToOptions function in msfweb in Metasploit Framework 2.4 and earlier, when running with the -D option (defanged mode), allows attac (no CVSS)
- [CVE-2005-2483](https://cve.now/CVE-2005-2483.md): Eval injection vulnerability in Karrigell before 2.1.8 allows remote attackers to execute arbitrary Python code via modified arguments to a (no CVSS)
- [CVE-2005-2484](https://cve.now/CVE-2005-2484.md): Buffer overflow in the rdb\_query function for Denora IRC Stats 1.0 might allow attackers to execute arbitrary code. (no CVSS)
- [CVE-2005-2485](https://cve.now/CVE-2005-2485.md): Cross-site scripting (XSS) vulnerability in the Helpdesk in Logicampus before 1.1.1 allows remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2005-2486](https://cve.now/CVE-2005-2486.md): SQL injection vulnerability in mod\_forum/read\_message.php in PortailPHP allows remote attackers to execute arbitrary SQL commands via the id (no CVSS)
- [CVE-2005-2487](https://cve.now/CVE-2005-2487.md): Unknown vulnerability in Sun McData switches and directors 4300, 4500, 6064, and 6140 before E/OS 6.0.0 may allow attackers to cause a denia (no CVSS)
- [CVE-2005-2488](https://cve.now/CVE-2005-2488.md): Cross-site scripting (XSS) vulnerability in Web Content Management News System allows remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2005-2489](https://cve.now/CVE-2005-2489.md): Web Content Management News System allows remote attackers to create arbitrary accounts and gain privileges via a direct request to Admin/Us (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-08-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.