# CVEs published 2005-08-29 25 CVEs were published on August 29, 2005: 0 critical, 0 high. Days are UTC. - [CVE-2005-1855](https://cve.now/CVE-2005-1855.md): Backup Manager (backup-manager) before 0.5.8 creates backup files with world-readable default permissions, which allows local users to obtai (no CVSS) - [CVE-2005-1856](https://cve.now/CVE-2005-1856.md): The CD-burning feature in backup-manager 0.5.8 and earlier uses a fixed filename in a world-writable directory for logging, which allows loc (no CVSS) - [CVE-2005-2017](https://cve.now/CVE-2005-2017.md): Symantec AntiVirus 9 Corporate Edition allows local users to gain privileges via the "Scan for viruses" option, which launches a help window (no CVSS) - [CVE-2005-2716](https://cve.now/CVE-2005-2716.md): The event\_pin\_code\_request function in the btsrv daemon (btsrv.c) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrar (no CVSS) - [CVE-2005-2717](https://cve.now/CVE-2005-2717.md): PHP remote file inclusion vulnerability in WebCalendar before 1.0.1 allows remote attackers to execute arbitrary PHP code when opening setti (no CVSS) - [CVE-2005-2718](https://cve.now/CVE-2005-2718.md): Buffer overflow in ad\_pcm.c in MPlayer 1.0pre7 and earlier allows remote attackers to execute arbitrary code via crafted PCM audio data, as (no CVSS) - [CVE-2005-2719](https://cve.now/CVE-2005-2719.md): Ventrilo 2.1.2 through 2.3.0 allows remote attackers to cause a denial of service (application crash) via a status packet that contains less (no CVSS) - [CVE-2005-2720](https://cve.now/CVE-2005-2720.md): Stack-based buffer overflow in the ACE archive decompression library (vrAZace.dll) in HAURI Anti-Virus products including ViRobot Expert 4.0 (no CVSS) - [CVE-2005-2721](https://cve.now/CVE-2005-2721.md): Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php or (2) admin.php in Foojan PHP Weblog allow remote attackers to inject (no CVSS) - [CVE-2005-2722](https://cve.now/CVE-2005-2722.md): Foojan PHP Weblog allows remote attackers to obtain sensitive information via (1) a direct request to /daylinks/index.php or (2) a negative (no CVSS) - [CVE-2005-2723](https://cve.now/CVE-2005-2723.md): SQL injection vulnerability in auth.php in PaFileDB 3.1, when authmethod is set to cookies, allows remote attackers to execute arbitrary SQL (no CVSS) - [CVE-2005-2724](https://cve.now/CVE-2005-2724.md): Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web script or HTML via a file attach (no CVSS) - [CVE-2005-2725](https://cve.now/CVE-2005-2725.md): The inputtrap utility in QNX RTOS 6.1.0, 6.3, and possibly earlier versions does not properly check permissions when the -t flag is specifie (no CVSS) - [CVE-2005-2726](https://cve.now/CVE-2005-2726.md): Directory traversal vulnerability in Home Ftp Server 1.0.7 allows remote authenticated users to read arbitrary files via "C:\\" (Windows driv (no CVSS) - [CVE-2005-2727](https://cve.now/CVE-2005-2727.md): Home Ftp Server 1.0.7 stores sensitive user information and server information in the same directory as the user's home directory, which all (no CVSS) - [CVE-2005-2728](https://cve.now/CVE-2005-2728.md): The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumption) via an HTTP head (no CVSS) - [CVE-2005-2729](https://cve.now/CVE-2005-2729.md): The HTTP proxy in Astaro Security Linux 6.0 does not properly filter HTTP CONNECT requests to localhost, which allows remote attackers to by (no CVSS) - [CVE-2005-2730](https://cve.now/CVE-2005-2730.md): The HTTP proxy in Astaro Security Linux 6.0 allows remote attackers to obtain sensitive information via an invalid request, which reveals a (no CVSS) - [CVE-2005-2731](https://cve.now/CVE-2005-2731.md): Directory traversal vulnerability in Astaro Security Linux 6.0, when using Webmin, allows remote authenticated webmin users to read arbitrar (no CVSS) - [CVE-2005-2732](https://cve.now/CVE-2005-2732.md): AWStats 6.4, and possibly earlier versions, allows remote attackers to obtain sensitive information via a file that does not exist in the co (no CVSS) - [CVE-2005-2733](https://cve.now/CVE-2005-2733.md): upload\_img\_cgi.php in Simple PHP Blog (SPHPBlog) does not properly restrict file extensions of uploaded files, which could allow remote atta (no CVSS) - [CVE-2005-2734](https://cve.now/CVE-2005-2734.md): Cross-site scripting (XSS) vulnerability in Gallery 1.5.1-RC2 and earlier allows remote attackers to inject arbitrary web script or HTML via (no CVSS) - [CVE-2005-2735](https://cve.now/CVE-2005-2735.md): Cross-site scripting (XSS) vulnerability in phpGraphy 0.9.9a and earlier allows remote attackers to inject arbitrary web script or HTML via (no CVSS) - [CVE-2005-2736](https://cve.now/CVE-2005-2736.md): Cross-site scripting (XSS) vulnerability in YaPig 0.95 and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF d (no CVSS) - [CVE-2005-2737](https://cve.now/CVE-2005-2737.md): Cross-site scripting (XSS) vulnerability in PhotoPost PHP Pro 5.1 allows remote attackers to inject arbitrary web script or HTML via EXIF da (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2005-08-29 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.