# CVEs published 2005-08-21

20 CVEs were published on August 21, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2004-2477](https://cve.now/CVE-2004-2477.md): DiamondCS Process Guard Free 2.000 allows local users to disable the process guard protection system by overwriting the current Service Desc (no CVSS)
- [CVE-2004-2478](https://cve.now/CVE-2004-2478.md): Unspecified vulnerability in Jetty HTTP Server, as used in (1) IBM Trading Partner Interchange before 4.2.4, (2) CA Unicenter Web Services D (no CVSS)
- [CVE-2004-2479](https://cve.now/CVE-2004-2479.md): Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS (no CVSS)
- [CVE-2004-2480](https://cve.now/CVE-2004-2480.md): Squid Web Proxy Cache 2.3.STABLE5 allows remote attackers to bypass security controls and access arbitrary websites via "@@" sequences in a (no CVSS)
- [CVE-2004-2481](https://cve.now/CVE-2004-2481.md): MyProxy 6.58 allows remote authenticated users in the Users Tab to connect to arbitrary hosts from the MyProxy server, possibly bypassing ac (no CVSS)
- [CVE-2004-2482](https://cve.now/CVE-2004-2482.md): Microsoft Outlook 2000 and 2003, when configured to use Microsoft Word 2000 or 2003 as the e-mail editor and when forwarding e-mail, does no (no CVSS)
- [CVE-2004-2483](https://cve.now/CVE-2004-2483.md): Kerio WinRoute Firewall before 6.0.9 uses information from PTR queries in response to A queries, which allows remote attackers to poison the (no CVSS)
- [CVE-2005-2641](https://cve.now/CVE-2005-2641.md): Unknown vulnerability in pam\_ldap before 180 does not properly handle a new password policy control, which could allow attackers to gain pri (no CVSS)
- [CVE-2005-2642](https://cve.now/CVE-2005-2642.md): Buffer overflow in the mutt\_decode\_xbit function in Handler.c for Mutt 1.5.10 allows remote attackers to execute arbitrary code, possibly du (no CVSS)
- [CVE-2005-2643](https://cve.now/CVE-2005-2643.md): Tor 0.1.0.13 and earlier, and experimental versions 0.1.1.4-alpha and earlier, does not reject certain weak keys when using ephemeral Diffie (no CVSS)
- [CVE-2005-2644](https://cve.now/CVE-2005-2644.md): Buffer overflow in JaguarEditControl.dll in Isemarket JaguarControl allows remote attackers to cause a denial of service (crash) and possibl (no CVSS)
- [CVE-2005-2645](https://cve.now/CVE-2005-2645.md): Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 (no CVSS)
- [CVE-2005-2646](https://cve.now/CVE-2005-2646.md): Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 (no CVSS)
- [CVE-2005-2647](https://cve.now/CVE-2005-2647.md): Cross-site scripting (XSS) vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, a (no CVSS)
- [CVE-2005-2648](https://cve.now/CVE-2005-2648.md): Directory traversal vulnerability in index.php in W-Agora 4.2.0 and earlier allows remote attackers to read arbitrary files via the site par (no CVSS)
- [CVE-2005-2649](https://cve.now/CVE-2005-2649.md): Cross-site scripting (XSS) vulnerability in ATutor 1.5.1 allows remote attackers to inject arbitrary web script or HTML via (1) course param (no CVSS)
- [CVE-2005-2650](https://cve.now/CVE-2005-2650.md): Cross-site scripting (XSS) vulnerability in sign.asp in Emefa Guestbook 1.2 allows remote attackers to inject arbitrary web script or HTML v (no CVSS)
- [CVE-2005-2651](https://cve.now/CVE-2005-2651.md): gorum/prod.php in Zorum 3.5 allows remote attackers to execute arbitrary code via shell metacharacters in the argv parameter. (no CVSS)
- [CVE-2005-2652](https://cve.now/CVE-2005-2652.md): Zorum 3.5 allows remote attackers to obtain the full installation path via direct requests to (1) gorum/notification.php, (2) user.php, (3) (no CVSS)
- [CVE-2005-2653](https://cve.now/CVE-2005-2653.md): Cross-site scripting (XSS) vulnerability in BBCaffe 2.0 allows remote attackers to inject arbitrary web script or HTML via e-mail data in a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-08-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.