# CVEs published 2005-09-28

18 CVEs were published on September 28, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-2557](https://cve.now/CVE-2005-2557.md): Cross-site scripting (XSS) vulnerability in view\_all\_set.php in Mantis 0.19.0a1 through 1.0.0a3 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2005-2964](https://cve.now/CVE-2005-2964.md): Stack-based buffer overflow in AbiWord before 2.2.10 allows attackers to execute arbitrary code via the RTF import mechanism. (no CVSS)
- [CVE-2005-3089](https://cve.now/CVE-2005-3089.md): Firefox 1.0.6 allows attackers to cause a denial of service (crash) via a Proxy Auto-Config (PAC) script that uses an eval statement. (no CVSS)
- [CVE-2005-3090](https://cve.now/CVE-2005-3090.md): Cross-site scripting (XSS) vulnerability in bug\_actiongroup\_page.php in Mantis 0.19.0a1 through 1.0.0a3 allows remote attackers to inject ar (no CVSS)
- [CVE-2005-3091](https://cve.now/CVE-2005-3091.md): Cross-site scripting (XSS) vulnerability in Mantis before 1.0.0rc1 allows remote attackers to inject arbitrary web script or HTML via unknow (no CVSS)
- [CVE-2005-3092](https://cve.now/CVE-2005-3092.md): Heap-based buffer overflow in Image-Line Software FL Studio 5.0.1 allows remote attackers to execute arbitrary code via a .flp file that con (no CVSS)
- [CVE-2005-3093](https://cve.now/CVE-2005-3093.md): Nokia 7610 and 3210 phones allows attackers to cause a denial of service via certain characters in the filename of a Bluetooth OBEX transfer (no CVSS)
- [CVE-2005-3094](https://cve.now/CVE-2005-3094.md): Avi Alkalay man-cgi script allows remote attackers to execute arbitrary code via shell metacharacters in the topic parameter. (no CVSS)
- [CVE-2005-3095](https://cve.now/CVE-2005-3095.md): Avi Alkalay notify program, dated 19 Aug 2001, allows remote attackers to execute arbitrary commands via shell metacharacters in the from pa (no CVSS)
- [CVE-2005-3096](https://cve.now/CVE-2005-3096.md): Avi Alkalay nslookup.cgi program, dated 16 June 2002, allows remote attackers to execute arbitrary commands via shell metacharacters in the (no CVSS)
- [CVE-2005-3097](https://cve.now/CVE-2005-3097.md): Directory traversal vulnerability in Avi Alkalay contribute.cgi (aka contribute.pl), dated 16 Jun 2002, allows remote attackers to overwrite (no CVSS)
- [CVE-2005-3098](https://cve.now/CVE-2005-3098.md): poppassd in Qualcomm qpopper 4.0.8 allows local users to modify arbitrary files and gain privileges via the -t (trace file) command line arg (no CVSS)
- [CVE-2005-3099](https://cve.now/CVE-2005-3099.md): Unspecified vulnerability in the (1) Xsun and (2) Xprt commands in Solaris 7, 8, 9, and 10 allows local users to execute arbitrary code. (no CVSS)
- [CVE-2005-3100](https://cve.now/CVE-2005-3100.md): Unspecified "PPTP Remote DoS Vulnerability" in Astaro Security Linux 4.027 allows attackers to cause a denial of service. (no CVSS)
- [CVE-2005-3101](https://cve.now/CVE-2005-3101.md): The password reset feature in Movable Type before 3.2 generates different error messages depending on whether a user exists or not, which al (no CVSS)
- [CVE-2005-3102](https://cve.now/CVE-2005-3102.md): The administrative interface in Movable Type allows attackers to upload files with arbitrary extensions under the web root. (no CVSS)
- [CVE-2005-3103](https://cve.now/CVE-2005-3103.md): Cross-site scripting (XSS) vulnerability in Movable Type before 3.2 allows remote attackers to inject arbitrary web script or HTML via the ( (no CVSS)
- [CVE-2005-3104](https://cve.now/CVE-2005-3104.md): mt-comments.cgi in Movable Type before 3.2 allows attackers to redirect users to other web sites via URLs in comments. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-09-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.