# CVEs published 2005-09-22

14 CVEs were published on September 22, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-3031](https://cve.now/CVE-2005-3031.md): Buffer overflow in vxFtpSrv 0.9.7 allows remote attackers to execute arbitrary code via a long USER name. (no CVSS)
- [CVE-2005-3032](https://cve.now/CVE-2005-3032.md): Buffer overflow in vxTftpSrv 1.7.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a TF (no CVSS)
- [CVE-2005-3033](https://cve.now/CVE-2005-3033.md): Stack-based buffer overflow in vxWeb 1.1.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code (no CVSS)
- [CVE-2005-3034](https://cve.now/CVE-2005-3034.md): Compuware DriverStudio Remote Control service (DSRsvc.exe) 2.7 and 3.0 beta 2 allows remote attackers to bypass authentication via a null se (no CVSS)
- [CVE-2005-3035](https://cve.now/CVE-2005-3035.md): Compuware DriverStudio Remote Control service (DSRsvc.exe) 2.7 and 3.0 beta 2 allows remote attackers to cause a denial of service (reboot) (no CVSS)
- [CVE-2005-3036](https://cve.now/CVE-2005-3036.md): File Transfer Anywhere 3.01 stores sensitive password information in plaintext in the PASS value in the "File Transfer Anywhere" registry ke (no CVSS)
- [CVE-2005-3037](https://cve.now/CVE-2005-3037.md): Cross-site scripting (XSS) vulnerability in Handy Address Book Server 1.1 allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2005-3038](https://cve.now/CVE-2005-3038.md): Unspecified vulnerability in Hosting Controller 6.1 before Hotfix 2.4 allows remote attackers to list and read contents of arbitrary drives, (no CVSS)
- [CVE-2005-3039](https://cve.now/CVE-2005-3039.md): SQL injection vulnerability in infopage.asp in Mall23 eCommerce allows remote attackers to execute arbitrary SQL commands via the idPage par (no CVSS)
- [CVE-2005-3040](https://cve.now/CVE-2005-3040.md): Directory traversal vulnerability in the web interface (ISALogin.dll) for TAC Vista 4.0, and possibly other versions before 4.3, allows remo (no CVSS)
- [CVE-2005-3041](https://cve.now/CVE-2005-3041.md): Unspecified "drag-and-drop vulnerability" in Opera Web Browser before 8.50 on Windows allows "unintentional file uploads." (no CVSS)
- [CVE-2005-3042](https://cve.now/CVE-2005-3042.md): miniserv.pl in Webmin before 1.230 and Usermin before 1.160, when "full PAM conversations" is enabled, allows remote attackers to bypass aut (no CVSS)
- [CVE-2005-3043](https://cve.now/CVE-2005-3043.md): SQL injection vulnerability in AddItem.asp in Mall23 eCommerce allows remote attackers to execute arbitrary SQL commands via the idOption\_Dr (no CVSS)
- [CVE-2005-3044](https://cve.now/CVE-2005-3044.md): Multiple vulnerabilities in Linux kernel before 2.6.13.2 allow local users to cause a denial of service (kernel OOPS from null dereference) (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-09-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.