# CVEs published 2005-08-10 29 CVEs were published on August 10, 2005: 0 critical, 0 high. Days are UTC. - [CVE-2005-0058](https://cve.now/CVE-2005-0058.md): Buffer overflow in the Telephony Application Programming Interface (TAPI) for Microsoft Windows 98, Windows 98 SE, Windows ME, Windows 2000, (no CVSS) - [CVE-2005-1218](https://cve.now/CVE-2005-1218.md): The Microsoft Windows kernel in Microsoft Windows 2000 Server, Windows XP, and Windows Server 2003 allows remote attackers to cause a denial (no CVSS) - [CVE-2005-1981](https://cve.now/CVE-2005-1981.md): Unknown vulnerability in Microsoft Windows 2000 Server and Windows Server 2003 domain controllers allows remote authenticated users to cause (no CVSS) - [CVE-2005-1982](https://cve.now/CVE-2005-1982.md): Unknown vulnerability in the PKINIT Protocol for Microsoft Windows 2000, Windows XP, and Windows Server 2003 could allow a local user to obt (no CVSS) - [CVE-2005-1983](https://cve.now/CVE-2005-1983.md): Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attack (no CVSS) - [CVE-2005-1984](https://cve.now/CVE-2005-1984.md): Buffer overflow in the Print Spooler service (Spoolsv.exe) for Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote att (no CVSS) - [CVE-2005-1988](https://cve.now/CVE-2005-1988.md): Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to execute arbitrary code via a web site or an HTML e-m (no CVSS) - [CVE-2005-1989](https://cve.now/CVE-2005-1989.md): Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to obtain information and possibly execute code when br (no CVSS) - [CVE-2005-1990](https://cve.now/CVE-2005-1990.md): Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary (no CVSS) - [CVE-2005-2360](https://cve.now/CVE-2005-2360.md): Unknown vulnerability in the LDAP dissector in Ethereal 0.8.5 through 0.10.11 allows remote attackers to cause a denial of service (free sta (no CVSS) - [CVE-2005-2361](https://cve.now/CVE-2005-2361.md): Unknown vulnerability in the (1) AgentX dissector, (2) PER dissector, (3) DOCSIS dissector, (4) SCTP graphs, (5) HTTP dissector, (6) DCERPC, (no CVSS) - [CVE-2005-2362](https://cve.now/CVE-2005-2362.md): Unknown vulnerability several dissectors in Ethereal 0.9.0 through 0.10.11 allows remote attackers to cause a denial of service (application (no CVSS) - [CVE-2005-2363](https://cve.now/CVE-2005-2363.md): Unknown vulnerability in the (1) SMPP dissector, (2) 802.3 dissector, (3) DHCP, (4) MEGACO dissector, or (5) H1 dissector in Ethereal 0.8.15 (no CVSS) - [CVE-2005-2364](https://cve.now/CVE-2005-2364.md): Unknown vulnerability in the (1) GIOP dissector, (2) WBXML, or (3) CAMEL dissector in Ethereal 0.8.20 through 0.10.11 allows remote attacker (no CVSS) - [CVE-2005-2365](https://cve.now/CVE-2005-2365.md): Unknown vulnerability in the SMB dissector in Ethereal 0.9.0 through 0.10.11 allows remote attackers to cause a buffer overflow or a denial (no CVSS) - [CVE-2005-2366](https://cve.now/CVE-2005-2366.md): Unknown vulnerability in the BER dissector in Ethereal 0.10.11 allows remote attackers to cause a denial of service (abort or infinite loop) (no CVSS) - [CVE-2005-2367](https://cve.now/CVE-2005-2367.md): Format string vulnerability in the proto\_item\_set\_text function in Ethereal 0.9.4 through 0.10.11, as used in multiple dissectors, allows re (no CVSS) - [CVE-2005-2535](https://cve.now/CVE-2005-2535.md): Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execute arbitrary command (no CVSS) - [CVE-2005-2536](https://cve.now/CVE-2005-2536.md): pstotext before 1.8g does not properly use the "-dSAFER" option when calling Ghostscript to extract plain text from PostScript and PDF files (no CVSS) - [CVE-2005-2537](https://cve.now/CVE-2005-2537.md): FlatNuke 2.5.5 and possibly earlier versions allows remote attackers to obtain sensitive information via a direct request to structure.php. (no CVSS) - [CVE-2005-2538](https://cve.now/CVE-2005-2538.md): FlatNuke 2.5.5 and possibly earlier versions allows remote attackers to obtain sensitive information via (1) a null byte or (2) an MS-DOS de (no CVSS) - [CVE-2005-2539](https://cve.now/CVE-2005-2539.md): Multiple cross-site scripting (XSS) vulnerabilities in FlatNuke 2.5.5 and possibly earlier versions allow remote attackers to inject arbitra (no CVSS) - [CVE-2005-2540](https://cve.now/CVE-2005-2540.md): CRLF injection vulnerability in FlatNuke 2.5.5 and possibly earlier versions allows remote attackers to execute arbitrary PHP commands via a (no CVSS) - [CVE-2005-2541](https://cve.now/CVE-2005-2541.md): Tar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may allow local users or remote attackers to gain p (no CVSS) - [CVE-2005-2542](https://cve.now/CVE-2005-2542.md): Invision Power Board (IPB) 1.0.3 allows remote attackers to inject arbitrary web script or HTML via an attachment, which is automatically do (no CVSS) - [CVE-2005-2543](https://cve.now/CVE-2005-2543.md): Directory traversal vulnerability in wce.download.php in Comdev eCommerce 3.0 allows remote attackers to download arbitrary files via a .. (no CVSS) - [CVE-2005-2544](https://cve.now/CVE-2005-2544.md): PHP remote file inclusion vulnerability in config.php in Comdev eCommerce 3.0 allows remote attackers to execute arbitrary PHP code via the (no CVSS) - [CVE-2005-2545](https://cve.now/CVE-2005-2545.md): Multiple cross-site scripting (XSS) vulnerabilities in PHPOpenChat 3.0.2 allow remote attackers to inject arbitrary web script or HTML via t (no CVSS) - [CVE-2005-2546](https://cve.now/CVE-2005-2546.md): Arab Portal 2.0 allows remote attackers to obtain sensitive information via a long (1) username or (2) password, which reveals the path in a (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2005-08-10 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.