# CVEs published 2005-08-19

36 CVEs were published on August 19, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2003-1231](https://cve.now/CVE-2003-1231.md): Cross-site scripting (XSS) vulnerability in index.php in ECW-Shop 5.5 allows remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2004-0951](https://cve.now/CVE-2004-0951.md): The make\_recovery command for the TFTP server in HP Ignite-UX before C.6.2.241 makes a copy of the password file in the TFTP directory tree, (no CVSS)
- [CVE-2004-0952](https://cve.now/CVE-2004-0952.md): HP-UX B.11.00 through B.11.23, when running Ignite-UX and using the add\_new\_client command, causes the TFTP server to set world-writable per (no CVSS)
- [CVE-2005-2127](https://cve.now/CVE-2005-2127.md): Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute a (no CVSS)
- [CVE-2005-2501](https://cve.now/CVE-2005-2501.md): Buffer overflow in AppKit for Mac OS X 10.3.9 and 10.4.2 allows external user-assisted attackers to execute arbitrary code via a crafted Ric (no CVSS)
- [CVE-2005-2502](https://cve.now/CVE-2005-2502.md): Buffer overflow in AppKit for Mac OS X 10.3.9 and 10.4.2, as used in applications such as TextEdit, allows external user-assisted attackers (no CVSS)
- [CVE-2005-2503](https://cve.now/CVE-2005-2503.md): AppKit for Mac OS X 10.3.9 and 10.4.2 allows attackers with physical access to create local accounts by forcing a particular error to occur (no CVSS)
- [CVE-2005-2504](https://cve.now/CVE-2005-2504.md): The System Profiler in Mac OS X 10.4.2 labels a Bluetooth device with "Requires Authentication: No" even when the user has selected the "Req (no CVSS)
- [CVE-2005-2505](https://cve.now/CVE-2005-2505.md): Buffer overflow in CoreFoundation in Mac OS X 10.3.9 allows attackers to execute arbitrary code via command line arguments to an application (no CVSS)
- [CVE-2005-2506](https://cve.now/CVE-2005-2506.md): Algorithmic complexity vulnerability in CoreFoundation in Mac OS X 10.3.9 and 10.4.2 allows attackers to cause a denial of service (CPU cons (no CVSS)
- [CVE-2005-2507](https://cve.now/CVE-2005-2507.md): Buffer overflow in Directory Services in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to execute arbitrary code during authentication. (no CVSS)
- [CVE-2005-2508](https://cve.now/CVE-2005-2508.md): dsidentity in Directory Services in Mac OS X 10.4.2 allows local users to add or remove user accounts. (no CVSS)
- [CVE-2005-2509](https://cve.now/CVE-2005-2509.md): Unknown vulnerability in loginwindow in Mac OS X 10.4.2 and earlier, when Fast User Switching is enabled, allows attackers to log into other (no CVSS)
- [CVE-2005-2510](https://cve.now/CVE-2005-2510.md): The Server Admin tool in servermgr\_ipfilter for Mac OS X 10.4 to 10.4.2, when using multiple subnets and Address Groups, does not always pro (no CVSS)
- [CVE-2005-2511](https://cve.now/CVE-2005-2511.md): Unknown vulnerability in Mac OS X 10.4.2 and earlier, when using Kerberos authentication with LDAP, allows attackers to gain access to a roo (no CVSS)
- [CVE-2005-2512](https://cve.now/CVE-2005-2512.md): Mail.app in Mac OS 10.4.2 and earlier, when printing or forwarding an HTML message, loads remote images even when the user's preferences sta (no CVSS)
- [CVE-2005-2513](https://cve.now/CVE-2005-2513.md): Unknown vulnerability in HItoolbox for Mac OS X 10.4.2 allows VoiceOver services to read secure input fields. (no CVSS)
- [CVE-2005-2514](https://cve.now/CVE-2005-2514.md): Buffer overflow in ping in Mac OS X 10.3.9 allows local users to execute arbitrary code. (no CVSS)
- [CVE-2005-2515](https://cve.now/CVE-2005-2515.md): Quartz Composer Screen Saver in Mac OS X 10.4.2 allows local users to access links from the RSS Visualizer even when a password is required. (no CVSS)
- [CVE-2005-2516](https://cve.now/CVE-2005-2516.md): Safari in Mac OS X 10.3.9 and 10.4.2, when rendering Rich Text Format (RTF) files, can directly access URLs without performing the normal se (no CVSS)
- [CVE-2005-2517](https://cve.now/CVE-2005-2517.md): Safari in Mac OS X 10.3.9 and 10.4.2 submits forms from an XSL formatted page to the next page that is browsed by the user, which causes for (no CVSS)
- [CVE-2005-2518](https://cve.now/CVE-2005-2518.md): Buffer overflow in servermgrd in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to execute arbitrary code during authentication. (no CVSS)
- [CVE-2005-2519](https://cve.now/CVE-2005-2519.md): slpd in Directory Services in Mac OS X 10.3.9 creates insecure temporary files as root, which allows local users to gain privileges. (no CVSS)
- [CVE-2005-2520](https://cve.now/CVE-2005-2520.md): The password assistant in Mac OS X 10.4 to 10.4.2, when used to create multiple accounts from the same process, does not reset the suggested (no CVSS)
- [CVE-2005-2521](https://cve.now/CVE-2005-2521.md): Buffer overflow in traceroute in Mac OS X 10.3.9 allows local users to execute arbitrary code via unknown vectors. (no CVSS)
- [CVE-2005-2522](https://cve.now/CVE-2005-2522.md): Safari in WebKit in Mac OS X 10.4 to 10.4.2 directly accesses URLs within PDF files without the normal security checks, which allows remote (no CVSS)
- [CVE-2005-2523](https://cve.now/CVE-2005-2523.md): Multiple cross-site scripting (XSS) vulnerabilities in Weblog Server in Mac OS X 10.4 to 10.4.2 allow remote attackers to inject arbitrary w (no CVSS)
- [CVE-2005-2525](https://cve.now/CVE-2005-2525.md): CUPS in Mac OS X 10.3.9 and 10.4.2 does not properly close file descriptors when handling multiple simultaneous print jobs, which allows rem (no CVSS)
- [CVE-2005-2526](https://cve.now/CVE-2005-2526.md): CUPS in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to cause a denial of service (CPU consumption) by sending a partial IPP request a (no CVSS)
- [CVE-2005-2621](https://cve.now/CVE-2005-2621.md): index.php in ECW-Shop 6.0.2 allows remote attackers to obtain sensitive information via the (1) min or (2) max parameter with a "'" (single (no CVSS)
- [CVE-2005-2622](https://cve.now/CVE-2005-2622.md): Cross-site scripting (XSS) vulnerability in index.php in ECW-Shop 6.0.2 allows remote attackers to inject arbitrary web script or HTML via t (no CVSS)
- [CVE-2005-2623](https://cve.now/CVE-2005-2623.md): ECW-Shop 6.0.2 allows remote attackers to reduce the total cost of their shopping cart by specifying a negative quantity for an item, which (no CVSS)
- [CVE-2005-2624](https://cve.now/CVE-2005-2624.md): Eval injection vulnerability in CPAINT 1.3-SP allows remote attackers to execute arbitrary ASP code via the cpaint\_argument\[\] parameter to ( (no CVSS)
- [CVE-2005-2625](https://cve.now/CVE-2005-2625.md): Incomplete blacklist vulnerability in the checkBlacklist function in CPAINT allows remote attackers to execute arbitrary commands via the (1 (no CVSS)
- [CVE-2005-2626](https://cve.now/CVE-2005-2626.md): Unspecified vulnerability in Kismet before 2005-08-R1 allows remote attackers to have an unknown impact via unprintable characters in the SS (no CVSS)
- [CVE-2005-2627](https://cve.now/CVE-2005-2627.md): Multiple integer underflows in Kismet before 2005-08-R1 allow remote attackers to execute arbitrary code via (1) kernel headers in a pcap fi (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-08-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.