# CVEs published 2005-09-08

31 CVEs were published on September 8, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-2020](https://cve.now/CVE-2005-2020.md): Directory traversal vulnerability in the web server for 3Com Network Supervisor 5.0.2 allows remote attackers to read arbitrary files via ". (no CVSS)
- [CVE-2005-2841](https://cve.now/CVE-2005-2841.md): Buffer overflow in Firewall Authentication Proxy for FTP and/or Telnet Sessions for Cisco IOS 12.2ZH and 12.2ZL, 12.3 and 12.3T, and 12.4 an (no CVSS)
- [CVE-2005-2842](https://cve.now/CVE-2005-2842.md): Buffer overflow in dwrcs.exe in DameWare Mini Remote Control before 4.9.0 allows remote attackers to execute arbitrary code via the username (no CVSS)
- [CVE-2005-2843](https://cve.now/CVE-2005-2843.md): Helpdesk software Hesk 0.92 does not properly verify usernames and passwords, which allows remote attackers to bypass authentication via a d (no CVSS)
- [CVE-2005-2844](https://cve.now/CVE-2005-2844.md): Buffer overflow in MMClient.exe in Indiatimes Messenger 6.0 allows remote attackers to cause a denial of service (application crash) and pos (no CVSS)
- [CVE-2005-2845](https://cve.now/CVE-2005-2845.md): Ariba Spend Management System sends the username and password to the server in plaintext in a POST request, which allows remote attackers to (no CVSS)
- [CVE-2005-2846](https://cve.now/CVE-2005-2846.md): PHP remote file inclusion vulnerability in lang.php in CMS Made Simple 0.10 and earlier allows remote attackers to execute arbitrary PHP cod (no CVSS)
- [CVE-2005-2847](https://cve.now/CVE-2005-2847.md): img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to execute arbitrary commands via shell metacha (no CVSS)
- [CVE-2005-2848](https://cve.now/CVE-2005-2848.md): Directory traversal vulnerability in img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to read ar (no CVSS)
- [CVE-2005-2849](https://cve.now/CVE-2005-2849.md): Argument injection vulnerability in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to (1) read portions (no CVSS)
- [CVE-2005-2850](https://cve.now/CVE-2005-2850.md): SlimFTPd 3.17 allows remote attackers to cause a denial of service (crash) via certain (1) USER and (2) PASS commands, possibly due to a buf (no CVSS)
- [CVE-2005-2851](https://cve.now/CVE-2005-2851.md): smb4k 0.4 and other versions before 0.6.3 allows local users to read sensitive files via a symlink attack on the (1) smb4k.tmp or (2) sudoer (no CVSS)
- [CVE-2005-2852](https://cve.now/CVE-2005-2852.md): Unknown vulnerability in CIFS.NLM in Novell Netware 6.5 SP2 and SP3, 5.1, and 6.0 allows remote attackers to cause a denial of service (ABEN (no CVSS)
- [CVE-2005-2853](https://cve.now/CVE-2005-2853.md): Multiple cross-site scripting (XSS) vulnerabilities in GuppY 4.5.3a and earlier allow remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2005-2854](https://cve.now/CVE-2005-2854.md): CRLF injection vulnerability in thesitewizard.com chfeedback.pl Feedback Form Perl Script 2.0.1 allows remote attackers to use the script as (no CVSS)
- [CVE-2005-2855](https://cve.now/CVE-2005-2855.md): Cross-site scripting (XSS) vulnerability in Unclassified NewsBoard 1.5.3 allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2005-2856](https://cve.now/CVE-2005-2856.md): Stack-based buffer overflow in the WinACE UNACEV2.DLL third-party compression utility before 2.6.0.0, as used in multiple products including (no CVSS)
- [CVE-2005-2857](https://cve.now/CVE-2005-2857.md): Free SMTP Server 2.2 allows remote attackers to use the server as an open mail relay (spam proxy). (no CVSS)
- [CVE-2005-2858](https://cve.now/CVE-2005-2858.md): The Fetch.FetchContact.1 ActiveX control (Fetch.dll) for Rediff Bol 7.0 allows remote attackers to read the Windows Address Book via the Ful (no CVSS)
- [CVE-2005-2859](https://cve.now/CVE-2005-2859.md): Savant Web Server stores user credentials in plaintext in the Savant\\Users registry key, which allows local users to gain privileges. (no CVSS)
- [CVE-2005-2860](https://cve.now/CVE-2005-2860.md): Cross-site scripting (XSS) vulnerability in Nikto 1.35 and earlier allows remote attackers to inject arbitrary web script or HTML via the Se (no CVSS)
- [CVE-2005-2861](https://cve.now/CVE-2005-2861.md): Cross-site scripting (XSS) vulnerability in N-Stealth Commercial Edition before 5.8.0.38 and Free Edition before 5.8.1.03 allows remote atta (no CVSS)
- [CVE-2005-2862](https://cve.now/CVE-2005-2862.md): ADSL Road Runner modem in the Annex A family has a service running on port 224, which allows remote attackers to login to the modem with a b (no CVSS)
- [CVE-2005-2863](https://cve.now/CVE-2005-2863.md): Cross-site scripting (XSS) vulnerability in openwebmail-main.pl in OpenWebMail 2.41 allows remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2005-2864](https://cve.now/CVE-2005-2864.md): URBAN 1.5.3\_1 allows local users to overwrite arbitrary files via a symlink attack on the (1) high score or (2) save game files. (no CVSS)
- [CVE-2005-2865](https://cve.now/CVE-2005-2865.md): Multiple PHP remote file inclusion vulnerabilities in aMember Pro 2.3.4 allow remote attackers to execute arbitrary PHP code via the config\[ (no CVSS)
- [CVE-2005-2866](https://cve.now/CVE-2005-2866.md): Mercora IMRadio 4.0.0.0 stores usernames and passwords in plaintext in the MercoraClient\\Profiles registry key, which allows local users to (no CVSS)
- [CVE-2005-2867](https://cve.now/CVE-2005-2867.md): SQL injection vulnerability in BlueWhaleCRM allows remote attackers to execute arbitrary SQL commands via the Account ID field. (no CVSS)
- [CVE-2005-2868](https://cve.now/CVE-2005-2868.md): ZipTorrent 1.3.7.3 stores sensitive information in plaintext in the pref.txt file, which allows local users to obtain sensitive information (no CVSS)
- [CVE-2005-2869](https://cve.now/CVE-2005-2869.md): Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4 allow remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2005-2870](https://cve.now/CVE-2005-2870.md): Unknown vulnerability in the net-svc script on Solaris 10 allows remote authenticated users to execute arbitrary code on a DHCP client via c (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-09-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.