# CVEs published 2005-09-07

21 CVEs were published on September 7, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-2794](https://cve.now/CVE-2005-2794.md): store.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (crash) via certain aborted requests that tri (no CVSS)
- [CVE-2005-2796](https://cve.now/CVE-2005-2796.md): The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (segmentatio (no CVSS)
- [CVE-2005-2807](https://cve.now/CVE-2005-2807.md): frox 0.7.18, when running setuid root, does not properly drop privileges when reading a configuration file, which allows local users to read (no CVSS)
- [CVE-2005-2808](https://cve.now/CVE-2005-2808.md): frox 0.7.16 and 0.7.17 does not properly parse certain Deny ACLs, which might allow attackers to bypass intended restrictions and access blo (no CVSS)
- [CVE-2005-2809](https://cve.now/CVE-2005-2809.md): silc daemon (silcd.c) in Secure Internet Live Conferencing (SILC) 1.0 and earlier allows local users to overwrite arbitrary files via a syml (no CVSS)
- [CVE-2005-2810](https://cve.now/CVE-2005-2810.md): Multiple stack-based buffer overflows in urban before 1.5.3 allow local users to gain privileges via a long HOME environment variable to (1) (no CVSS)
- [CVE-2005-2811](https://cve.now/CVE-2005-2811.md): Untrusted search path vulnerability in Net-SNMP 5.2.1.2 and earlier, on Gentoo Linux, installs certain Perl modules with an insecure DT\_RPAT (no CVSS)
- [CVE-2005-2812](https://cve.now/CVE-2005-2812.md): man2web allows remote attackers to execute arbitrary commands via -P arguments. (no CVSS)
- [CVE-2005-2813](https://cve.now/CVE-2005-2813.md): Directory traversal vulnerability in FlatNuke 2.5.6 and possibly earlier allows remote attackers to read arbitrary files via ".." sequences (no CVSS)
- [CVE-2005-2814](https://cve.now/CVE-2005-2814.md): Cross-site scripting (XSS) vulnerability in FlatNuke 2.5.6 allows remote attackers to inject arbitrary web script or HTML via the usr parame (no CVSS)
- [CVE-2005-2815](https://cve.now/CVE-2005-2815.md): print.php in FlatNuke 2.5.6 allows remote attackers to obtain sensitive information (path disclosure on error) or cause a denial of service (no CVSS)
- [CVE-2005-2816](https://cve.now/CVE-2005-2816.md): Cross-site scripting (XSS) vulnerability in Greymatter allows remote attackers to inject arbitrary web script or HTML via a post comment, wh (no CVSS)
- [CVE-2005-2817](https://cve.now/CVE-2005-2817.md): Simple Machines Forum (SMF) 1-0-5 and earlier supports the use of URLs for avatar images, which allows remote attackers to monitor sensitive (no CVSS)
- [CVE-2005-2818](https://cve.now/CVE-2005-2818.md): Cross-site scripting (XSS) vulnerability in DownFile 1.3 allows remote attackers to inject arbitrary web script or HTML via the id parameter (no CVSS)
- [CVE-2005-2819](https://cve.now/CVE-2005-2819.md): DownFile 1.3 allows remote attackers to gain administrator privileges via a direct request to (1) update.php, (2) del.php, and (3) add\_form. (no CVSS)
- [CVE-2005-2820](https://cve.now/CVE-2005-2820.md): Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web script or HTML via an e-mail mes (no CVSS)
- [CVE-2005-2836](https://cve.now/CVE-2005-2836.md): Multiple cross-site scripting (XSS) vulnerabilities in Phorum 5.0.17a and earlier allow remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2005-2837](https://cve.now/CVE-2005-2837.md): Multiple eval injection vulnerabilities in PlainBlack Software WebGUI before 6.7.3 allow remote attackers to execute arbitrary Perl code via (no CVSS)
- [CVE-2005-2838](https://cve.now/CVE-2005-2838.md): SQL injection vulnerability in login.php in myBloggie 2.1.3-beta and earlier allows remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2005-2839](https://cve.now/CVE-2005-2839.md): Multiple cross-site scripting (XSS) vulnerabilities in MAXdev MD-Pro 1.0.72 allow remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2005-2840](https://cve.now/CVE-2005-2840.md): Multiple unknown vulnerabilities in MAXdev MD-Pro 1.0.72 and earlier have unknown impact and unspecified attack vectors, in one or more of t (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-09-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.