# CVEs published 2005-08-20

55 CVEs were published on August 20, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2004-2435](https://cve.now/CVE-2004-2435.md): Cross-site scripting (XSS) vulnerability in PeopleSoft Human Resources Management System (HRMS) 7.0, when "web enabled" using HTML Access, a (no CVSS)
- [CVE-2004-2436](https://cve.now/CVE-2004-2436.md): Computer Associates Unicenter Common Services 3.0 and earlier stores the database "SA" password in cleartext in the TndAddNspTmp.bat file, w (no CVSS)
- [CVE-2004-2437](https://cve.now/CVE-2004-2437.md): SQL injection vulnerability in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL commands via the rowstart parameter to (1) i (no CVSS)
- [CVE-2004-2438](https://cve.now/CVE-2004-2438.md): Cross-site scripting (XSS) vulnerability in PHP-Fusion 4.01 allows remote attackers to inject arbitrary web script or HTML via the (1) Submi (no CVSS)
- [CVE-2004-2439](https://cve.now/CVE-2004-2439.md): The remote upgrade capability in HP LaserJet 4200 and 4300 printers does not require a password, which allows remote attackers to upgrade fi (no CVSS)
- [CVE-2004-2440](https://cve.now/CVE-2004-2440.md): Unspecified vulnerability in cmdline.c in proxytunnel 1.1.3 and earlier allows local users to obtain proxy credentials (username or password (no CVSS)
- [CVE-2004-2441](https://cve.now/CVE-2004-2441.md): Unspecified vulnerability in Kerio MailServer before 6.0.3 has unknown impact and unknown remote attack vectors, related to a "potential sec (no CVSS)
- [CVE-2004-2442](https://cve.now/CVE-2004-2442.md): Multiple interpretation error in various F-Secure Anti-Virus products, including Workstation 5.43 and earlier, Windows Servers 5.50 and earl (no CVSS)
- [CVE-2004-2443](https://cve.now/CVE-2004-2443.md): Jaws 0.3 allows remote attackers to bypass authentication and via an HTTP request to admin.php with the logged cookie set to the MD5 hash of (no CVSS)
- [CVE-2004-2444](https://cve.now/CVE-2004-2444.md): Cross-site scripting (XSS) vulnerability in index.php in Jaws 0.3 allows remote attackers to inject arbitrary web script or HTML via the act (no CVSS)
- [CVE-2004-2445](https://cve.now/CVE-2004-2445.md): Directory traversal vulnerability in index.php in Jaws 0.3 BETA allows remote attackers to view arbitrary files via a .. (no CVSS)
- [CVE-2004-2446](https://cve.now/CVE-2004-2446.md): Directory traversal vulnerability in 1st Class Mail Server 4.01 allows remote attackers to read arbitrary files via a ".." (dot dot) sequenc (no CVSS)
- [CVE-2004-2447](https://cve.now/CVE-2004-2447.md): Cross-site scripting (XSS) vulnerability in 1st Class Mail Server 4.01 allows remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2004-2448](https://cve.now/CVE-2004-2448.md): S-Mart Shopping Cart or RediCart 3.9.5b stores smart.cfg under the web document root with insufficient access control, which allows remote a (no CVSS)
- [CVE-2004-2449](https://cve.now/CVE-2004-2449.md): Roger Wilco 1.4.1.6 and earlier or Roger Wilco Base Station 0.30a and earlier allows remote attackers to cause a denial of service (applicat (no CVSS)
- [CVE-2004-2450](https://cve.now/CVE-2004-2450.md): The client and server for Roger Wilco 1.4.1.6 and earlier or Roger Wilco Base Station 0.30a and earlier report sensitive information such as (no CVSS)
- [CVE-2004-2451](https://cve.now/CVE-2004-2451.md): Roger Wilco 1.4.1.6 and earlier, or Roger Wilco Base Station 0.30a or earlier, allows remote attackers to send audio to arbitrary channels, (no CVSS)
- [CVE-2004-2452](https://cve.now/CVE-2004-2452.md): Unknown vulnerability in Hitachi Cosminexus Portal Framework 01-00, 01-01, 01-02, 02-01, 02-02, 02-03, and other versions allows remote atta (no CVSS)
- [CVE-2004-2453](https://cve.now/CVE-2004-2453.md): Unknown vulnerability in Tutti Nova 0.10 through 0.12 (Beta) and 0.9.4, when register\_globals is enabled, has unknown impact and attack vect (no CVSS)
- [CVE-2004-2454](https://cve.now/CVE-2004-2454.md): aMSN 0.90 for Microsoft Windows allows local users to obtain sensitive information such as hashed passwords from (1) hotlog.htm and (2) conf (no CVSS)
- [CVE-2004-2455](https://cve.now/CVE-2004-2455.md): Sweex Wireless Broadband Router/Accesspoint 802.11g (LC000060) allows remote attackers to obtain sensitive information and gain privileges b (no CVSS)
- [CVE-2004-2456](https://cve.now/CVE-2004-2456.md): SQL injection vulnerability in index.php in miniBB 1.7f and earlier allows remote attackers to execute arbitrary SQL commands via the user p (no CVSS)
- [CVE-2004-2457](https://cve.now/CVE-2004-2457.md): Unspecified vulnerability in 3Com OfficeConnect ADSL 11g Router allows remote attackers to cause a denial of service (crash) via a large amo (no CVSS)
- [CVE-2004-2458](https://cve.now/CVE-2004-2458.md): Open WebMail 2.30 and earlier, when use\_syshomedir is disabled or create\_syshomedir is enabled, creates new directories before authenticatin (no CVSS)
- [CVE-2004-2459](https://cve.now/CVE-2004-2459.md): Unknown vulnerability in gnubiff 1.2.0 and earlier allows local users to obtain passwords, related to the password table. (no CVSS)
- [CVE-2004-2460](https://cve.now/CVE-2004-2460.md): Unknown vulnerability in POP3 in gnubiff before 2.0.0 allows remote attackers to cause a denial of service (application crash) via an "infin (no CVSS)
- [CVE-2004-2461](https://cve.now/CVE-2004-2461.md): Buffer overflow in pop3.c in gnubiff before 2.0.0 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code. (no CVSS)
- [CVE-2004-2462](https://cve.now/CVE-2004-2462.md): cplay 1.49 on Linux allows local users to overwrite arbitrary files via a symlink attack on the cplay\_control temporary file. (no CVSS)
- [CVE-2004-2463](https://cve.now/CVE-2004-2463.md): Buffer overflow in ADA Image Server (ImgSvr) 0.4 allows remote attackers to cause a denial of service (web server crash) or execute arbitrar (no CVSS)
- [CVE-2004-2464](https://cve.now/CVE-2004-2464.md): Directory traversal vulnerability in ADA Image Server (ImgSvr) 0.4 allows remote attackers to read arbitrary files or list directories via h (no CVSS)
- [CVE-2004-2465](https://cve.now/CVE-2004-2465.md): Cross-site scripting (XSS) vulnerability in chat.ghp in Easy Chat Server 1.2 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2004-2466](https://cve.now/CVE-2004-2466.md): chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service (server crash) via a long username parameter, possibly (no CVSS)
- [CVE-2004-2467](https://cve.now/CVE-2004-2467.md): chat.ghp in Easy Chat Server 1.2 allows remote attackers to add a large number of fake users, then eventually cause a denial of service (ser (no CVSS)
- [CVE-2004-2468](https://cve.now/CVE-2004-2468.md): Cross-site scripting (XSS) vulnerability in SillySearch 2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via t (no CVSS)
- [CVE-2004-2469](https://cve.now/CVE-2004-2469.md): Unspecified vulnerability in Reservation.class.php for phpScheduleIt 1.01 and earlier allows attackers to modify or delete reservations. (no CVSS)
- [CVE-2004-2470](https://cve.now/CVE-2004-2470.md): Unspecified vulnerability in MadBMS before 1.1.5 has unknown impact and attack vectors, related to logins. (no CVSS)
- [CVE-2004-2471](https://cve.now/CVE-2004-2471.md): SQL injection vulnerability in the sloth TCL script in QuoteEngine before 1.2.0 allow remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2004-2472](https://cve.now/CVE-2004-2472.md): Agnitum Outpost Pro Firewall 2.1 allows remote attackers to cause a denial of service (CPU consumption) via a flood of small, invalid packet (no CVSS)
- [CVE-2004-2473](https://cve.now/CVE-2004-2473.md): wmFrog weather monitor 0.1.6 and other versions before 0.2.0 allows local users to overwrite arbitrary files via a symlink attack on tempora (no CVSS)
- [CVE-2004-2474](https://cve.now/CVE-2004-2474.md): SQL injection vulnerability in PHPNews 1.2.3 allows remote attackers to execute arbitrary SQL commands via the mid parameter to sendtofriend (no CVSS)
- [CVE-2004-2475](https://cve.now/CVE-2004-2475.md): Cross-site scripting (XSS) vulnerability in Google Toolbar 2.0.114.1 allows remote attackers to inject arbitrary web script via about.html i (no CVSS)
- [CVE-2004-2476](https://cve.now/CVE-2004-2476.md): Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (infinite loop and crash) via an IFRAME with "?" as the (no CVSS)
- [CVE-2005-0357](https://cve.now/CVE-2005-0357.md): EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 rely on AUTH\_UNIX authentication, whic (no CVSS)
- [CVE-2005-0358](https://cve.now/CVE-2005-0358.md): EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 do not properly verify authentication toke (no CVSS)
- [CVE-2005-0359](https://cve.now/CVE-2005-0359.md): The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not rest (no CVSS)
- [CVE-2005-2631](https://cve.now/CVE-2005-2631.md): Cisco Clean Access (CCA) 3.3.0 to 3.3.9, 3.4.0 to 3.4.5, and 3.5.0 to 3.5.3 does not properly authenticate users when invoking API methods, (no CVSS)
- [CVE-2005-2632](https://cve.now/CVE-2005-2632.md): SQL injection vulnerability in login\_admin\_mediabox404.php in mediabox404 1.2 and earlier allows remote attackers to execute arbitrary SQL c (no CVSS)
- [CVE-2005-2633](https://cve.now/CVE-2005-2633.md): Multiple PHP file inclusion vulnerabilities in (1) admin\_o.php, (2) board\_o.php, (3) dev\_o.php, (4) file\_o.php or (5) tech\_o.php in PHPTB To (no CVSS)
- [CVE-2005-2634](https://cve.now/CVE-2005-2634.md): Buffer overflow in the Log-SCR function in the "Log to Screen" feature in WinFtp Server 1.6.8 allows remote attackers to cause a denial of s (no CVSS)
- [CVE-2005-2635](https://cve.now/CVE-2005-2635.md): Multiple directory traversal vulnerabilities in phpAdsNew and phpPgAds before 2.0.6 allow remote attackers to include arbitrary files via a (no CVSS)
- [CVE-2005-2636](https://cve.now/CVE-2005-2636.md): SQL injection vulnerability in lib-view-direct.inc.php in phpAdsNew and phpPgAds before 2.0.6 allows remote attackers to execute arbitrary S (no CVSS)
- [CVE-2005-2637](https://cve.now/CVE-2005-2637.md): Multiple SQL injection vulnerabilities in PHPFreeNews 1.40 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) (no CVSS)
- [CVE-2005-2638](https://cve.now/CVE-2005-2638.md): Multiple cross-site scripting (XSS) vulnerabilities in PHPFreeNews 1.40 and earlier allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2005-2639](https://cve.now/CVE-2005-2639.md): Buffer overflow in Chris Moneymaker's World Poker Championship 1.0 allows remote attackers to cause a denial of service (application crash) (no CVSS)
- [CVE-2005-2640](https://cve.now/CVE-2005-2640.md): Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key auth (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-08-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.