# CVEs published 2005-09-21

32 CVEs were published on September 21, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-0138](https://cve.now/CVE-2005-0138.md): rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not correctly allow access to anonymous clients that connect from a system whose host (no CVSS)
- [CVE-2005-0139](https://cve.now/CVE-2005-0139.md): Unknown vulnerability in rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not sufficiently restrict access rights for read-mostly expo (no CVSS)
- [CVE-2005-2662](https://cve.now/CVE-2005-2662.md): masqmail before 0.2.18 allows remote attackers to execute arbitrary commands via crafted e-mail addresses that are not properly sanitized wh (no CVSS)
- [CVE-2005-2663](https://cve.now/CVE-2005-2663.md): masqmail before 0.2.18 allows local users to overwrite arbitrary files via a symlink attack on a log file. (no CVSS)
- [CVE-2005-2764](https://cve.now/CVE-2005-2764.md): Multiple buffer overflows in OpenTTD before 0.4.0.1 allow attackers to cause a denial of service (crash) and possibly execute arbitrary code (no CVSS)
- [CVE-2005-3003](https://cve.now/CVE-2005-3003.md): SQL injection vulnerability in index.php in NooTopList 1.0.0 release 17 allows remote attackers to execute arbitrary SQL commands via the (1 (no CVSS)
- [CVE-2005-3004](https://cve.now/CVE-2005-3004.md): SQL injection vulnerability in Interakt MX Shop 3.2.0 allows remote attackers to execute arbitrary SQL commands via the (1) idp, (2) id\_ctg, (no CVSS)
- [CVE-2005-3005](https://cve.now/CVE-2005-3005.md): Helpdesk Software Hesk allows remote attackers to bypass authentication for (1) admin.php and (2) admin\_main.php by modifying the PHPSESSID (no CVSS)
- [CVE-2005-3006](https://cve.now/CVE-2005-3006.md): The mail client in Opera before 8.50 opens attached files from the user's cache directory without warning the user, which might allow remote (no CVSS)
- [CVE-2005-3007](https://cve.now/CVE-2005-3007.md): Opera before 8.50 allows remote attackers to spoof the content type of files via a filename with a trailing "." (dot), which might allow rem (no CVSS)
- [CVE-2005-3008](https://cve.now/CVE-2005-3008.md): Tofu 0.2 allows remote attackers to execute arbitrary Python code via crafted pickled objects, which Tofu unpickles and executes. (no CVSS)
- [CVE-2005-3009](https://cve.now/CVE-2005-3009.md): Cross-site scripting (XSS) vulnerability in CuteNews allows remote attackers to inject arbitrary web script or HTML via the mod parameter to (no CVSS)
- [CVE-2005-3010](https://cve.now/CVE-2005-3010.md): Direct static code injection vulnerability in the flood protection feature in inc/shows.inc.php in CuteNews 1.4.0 and earlier allows remote (no CVSS)
- [CVE-2005-3011](https://cve.now/CVE-2005-3011.md): The sort\_offline function for texindex in texinfo 4.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on te (no CVSS)
- [CVE-2005-3012](https://cve.now/CVE-2005-3012.md): The MasterDataCD::createImage function in masterdatacd.cpp for SimpleCDR-X 1.3.3 creates the .temp temporary directory with insecure permiss (no CVSS)
- [CVE-2005-3013](https://cve.now/CVE-2005-3013.md): Buffer overflow in liby2util in Yet another Setup Tool (YaST) for SuSE Linux 9.3 allows local users to execute arbitrary code via a long Loc (no CVSS)
- [CVE-2005-3014](https://cve.now/CVE-2005-3014.md): Cross-site scripting (XSS) vulnerability in Ensim webplliance allows remote attackers to inject arbitrary web script or HTML via the Login ( (no CVSS)
- [CVE-2005-3015](https://cve.now/CVE-2005-3015.md): Cross-site scripting (XSS) vulnerability in IBM Lotus Domino 6.5.2 allows remote attackers to inject arbitrary web script or HTML via the (1 (no CVSS)
- [CVE-2005-3016](https://cve.now/CVE-2005-3016.md): Multiple unspecified vulnerabilities in the WYSIWYG editor in PHP-Nuke before 7.9 Final have unknown impact and attack vectors. (no CVSS)
- [CVE-2005-3017](https://cve.now/CVE-2005-3017.md): PHP file inclusion vulnerability in index.php in Content2Web 1.0.1 allows remote attackers to include arbitrary files via the show parameter (no CVSS)
- [CVE-2005-3018](https://cve.now/CVE-2005-3018.md): Apple Safari allows remote attackers to cause a denial of service (application crash) via a crafted data:// URL. (no CVSS)
- [CVE-2005-3019](https://cve.now/CVE-2005-3019.md): Multiple SQL injection vulnerabilities in vBulletin before 3.0.9 allow remote attackers to execute arbitrary SQL commands via the (1) reques (no CVSS)
- [CVE-2005-3020](https://cve.now/CVE-2005-3020.md): Multiple cross-site scripting (XSS) vulnerabilities in vBulletin before 3.0.9 allow remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2005-3021](https://cve.now/CVE-2005-3021.md): image.php in vBulletin 3.0.9 and earlier allows remote attackers with access to the administrator panel to upload arbitrary files via the up (no CVSS)
- [CVE-2005-3022](https://cve.now/CVE-2005-3022.md): Multiple SQL injection vulnerabilities in vBulletin 3.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) a (no CVSS)
- [CVE-2005-3023](https://cve.now/CVE-2005-3023.md): Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.0.9 and earlier allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2005-3024](https://cve.now/CVE-2005-3024.md): Multiple SQL injection vulnerabilities in vBulletin 3.0.7 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) a (no CVSS)
- [CVE-2005-3025](https://cve.now/CVE-2005-3025.md): Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.0.7 and earlier allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2005-3026](https://cve.now/CVE-2005-3026.md): Directory traversal vulnerability in index.php in Alstrasoft Epay Pro 2.0 and earlier allows remote attackers to read arbitrary files via a (no CVSS)
- [CVE-2005-3027](https://cve.now/CVE-2005-3027.md): Sybari Antigen 8.0 SR2 does not properly filter SMTP messages, which allows remote attackers to bypass custom filter rules and send file att (no CVSS)
- [CVE-2005-3029](https://cve.now/CVE-2005-3029.md): Stack-based buffer overflow in AhnLab V3Pro 2004 build 6.0.0.383, V3 VirusBlock 2005 build 6.0.0.383, and V3Net for Windows Server 6.0 build (no CVSS)
- [CVE-2005-3030](https://cve.now/CVE-2005-3030.md): Directory traversal vulnerability in the archive decompression library in AhnLab V3Pro 2004 build 6.0.0.383, V3 VirusBlock 2005 build 6.0.0. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-09-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.