# CVEs published 2005-10-14

47 CVEs were published on October 14, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-2661](https://cve.now/CVE-2005-2661.md): Format string vulnerability in the ParseBannerAndCapability function in main.c for up-imapproxy 1.2.3 and 1.2.4 allows remote IMAP servers t (no CVSS)
- [CVE-2005-2967](https://cve.now/CVE-2005-2967.md): Format string vulnerability in input\_cdda.c in xine-lib 1-beta through 1-beta 3, 1-rc, 1.0 through 1.0.2, and 1.1.1 allows remote servers to (no CVSS)
- [CVE-2005-3194](https://cve.now/CVE-2005-3194.md): Multiple buffer overflows in ALZip 6.12 (Korean), 6.1 (International), and 5.52 (English) allow remote attackers to execute arbitrary code v (no CVSS)
- [CVE-2005-3196](https://cve.now/CVE-2005-3196.md): Planet Technology Corp FGSW2402RS switch with firmware 1.2 has a default password, which allows attackers with physical access to the device (no CVSS)
- [CVE-2005-3197](https://cve.now/CVE-2005-3197.md): Stack-based buffer overflow in PWIWrapper.dll for Webroot Desktop Firewall before 1.3.0build52 allows local users to execute arbitrary code (no CVSS)
- [CVE-2005-3198](https://cve.now/CVE-2005-3198.md): Webroot Desktop Firewall before 1.3.0build52 allows local users to disable the firewall, even when password protection is enabled, via certa (no CVSS)
- [CVE-2005-3199](https://cve.now/CVE-2005-3199.md): Multiple SQL injection vulnerabilities in aradmin.asp for aspReady FAQ allow remote attackers to execute arbitrary SQL commands, possibly vi (no CVSS)
- [CVE-2005-3200](https://cve.now/CVE-2005-3200.md): Multiple cross-site scripting (XSS) vulnerabilities in Utopia News Pro (UNP) 1.1.3 and 1.1.4 allow remote attackers to inject arbitrary web (no CVSS)
- [CVE-2005-3201](https://cve.now/CVE-2005-3201.md): SQL injection vulnerability in news.php for Utopia News Pro (UNP) 1.1.3, when magic\_quotes\_gpc is disabled and register\_globals is enabled, (no CVSS)
- [CVE-2005-3202](https://cve.now/CVE-2005-3202.md): Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTML DB (HTMLDB) 1.3 through 1.3.6 allow remote attackers to inject arbitrary (no CVSS)
- [CVE-2005-3203](https://cve.now/CVE-2005-3203.md): The manual installation of Oracle HTML DB (HTMLDB) 1.3 through 1.3.6 stores the SYS password in install.lst in plaintext, which allows local (no CVSS)
- [CVE-2005-3204](https://cve.now/CVE-2005-3204.md): Cross-site scripting (XSS) vulnerability in Oracle XML DB 9iR2 allows remote attackers to inject arbitrary web script or HTML via the query (no CVSS)
- [CVE-2005-3205](https://cve.now/CVE-2005-3205.md): Cross-site scripting (XSS) vulnerability in iSQL\*Plus (iSQLPlus) in Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to in (no CVSS)
- [CVE-2005-3206](https://cve.now/CVE-2005-3206.md): iSQL\*Plus (isqlplus) for Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to cause a denial of service (TNS listener stop) (no CVSS)
- [CVE-2005-3207](https://cve.now/CVE-2005-3207.md): The forms servlet (f90servlet) in Oracle Forms 4.5.10.22 allows remote attackers to cause a denial of service (TNS listener stop) via a user (no CVSS)
- [CVE-2005-3208](https://cve.now/CVE-2005-3208.md): Multiple SQL injection vulnerabilities in (1) aeNovo, (2) aeNovoShop and (3) aeNovoWYSI allow remote attackers to execute arbitrary SQL code (no CVSS)
- [CVE-2005-3209](https://cve.now/CVE-2005-3209.md): Aenovo products (1) aeNovo, (2) aeNovoShop, and (3) aeNovoWYSI store password information in plaintext in the (a) control, (b) content, and (no CVSS)
- [CVE-2005-3210](https://cve.now/CVE-2005-3210.md): Multiple interpretation error in unspecified versions of Kaspersky Antivirus allows remote attackers to bypass virus detection via a malicio (no CVSS)
- [CVE-2005-3211](https://cve.now/CVE-2005-3211.md): Multiple interpretation error in unspecified versions of BitDefender Antivirus allows remote attackers to bypass virus detection via a malic (no CVSS)
- [CVE-2005-3212](https://cve.now/CVE-2005-3212.md): Multiple interpretation error in unspecified versions of NOD32 Antivirus allows remote attackers to bypass virus detection via a malicious e (no CVSS)
- [CVE-2005-3213](https://cve.now/CVE-2005-3213.md): Multiple interpretation error in unspecified versions of F-Prot Antivirus allows remote attackers to bypass virus detection via a malicious (no CVSS)
- [CVE-2005-3214](https://cve.now/CVE-2005-3214.md): Multiple interpretation error in unspecified versions of Avast Antivirus allows remote attackers to bypass virus detection via a malicious e (no CVSS)
- [CVE-2005-3215](https://cve.now/CVE-2005-3215.md): Multiple interpretation error in unspecified versions of McAfee Antivirus allows remote attackers to bypass virus detection via a malicious (no CVSS)
- [CVE-2005-3216](https://cve.now/CVE-2005-3216.md): Multiple interpretation error in unspecified versions of Sophos Antivirus allows remote attackers to bypass virus detection via a malicious (no CVSS)
- [CVE-2005-3217](https://cve.now/CVE-2005-3217.md): Multiple interpretation error in unspecified versions of Symantec Antivirus allows remote attackers to bypass virus detection via a maliciou (no CVSS)
- [CVE-2005-3218](https://cve.now/CVE-2005-3218.md): Multiple interpretation error in unspecified versions of Dr.Web Antivirus allows remote attackers to bypass virus detection via a malicious (no CVSS)
- [CVE-2005-3219](https://cve.now/CVE-2005-3219.md): Multiple interpretation error in unspecified versions of Avira Antivirus allows remote attackers to bypass virus detection via a malicious e (no CVSS)
- [CVE-2005-3220](https://cve.now/CVE-2005-3220.md): Multiple interpretation error in unspecified versions of Norman Virus Control Antivirus allows remote attackers to bypass virus detection vi (no CVSS)
- [CVE-2005-3221](https://cve.now/CVE-2005-3221.md): Multiple interpretation error in unspecified versions of Fortinet Antivirus allows remote attackers to bypass virus detection via a maliciou (no CVSS)
- [CVE-2005-3222](https://cve.now/CVE-2005-3222.md): Multiple interpretation error in unspecified versions of VBA32 Antivirus allows remote attackers to bypass virus detection via a malicious e (no CVSS)
- [CVE-2005-3223](https://cve.now/CVE-2005-3223.md): Multiple interpretation error in unspecified versions of Rising Antivirus allows remote attackers to bypass virus detection via a malicious (no CVSS)
- [CVE-2005-3224](https://cve.now/CVE-2005-3224.md): Multiple interpretation error in unspecified versions of AntiVir Antivirus allows remote attackers to bypass virus detection via a malicious (no CVSS)
- [CVE-2005-3225](https://cve.now/CVE-2005-3225.md): Multiple interpretation error in unspecified versions of (1) eTrust-Iris and (2) eTrust-Vet Antivirus allows remote attackers to bypass viru (no CVSS)
- [CVE-2005-3226](https://cve.now/CVE-2005-3226.md): Multiple interpretation error in unspecified versions of ArcaVir Antivirus allows remote attackers to bypass virus detection via a malicious (no CVSS)
- [CVE-2005-3227](https://cve.now/CVE-2005-3227.md): Multiple interpretation error in unspecified versions of UNA Antivirus allows remote attackers to bypass virus detection via a malicious exe (no CVSS)
- [CVE-2005-3228](https://cve.now/CVE-2005-3228.md): Multiple interpretation error in unspecified versions of Ikarus AntiVirus allows remote attackers to bypass virus detection via a malicious (no CVSS)
- [CVE-2005-3229](https://cve.now/CVE-2005-3229.md): Multiple interpretation error in unspecified versions of ClamAV Antivirus allows remote attackers to bypass virus detection via a malicious (no CVSS)
- [CVE-2005-3230](https://cve.now/CVE-2005-3230.md): Multiple interpretation error in unspecified versions of Panda Antivirus allows remote attackers to bypass virus detection via a malicious e (no CVSS)
- [CVE-2005-3231](https://cve.now/CVE-2005-3231.md): Multiple interpretation error in unspecified versions of CAT Quick Heal allows remote attackers to bypass virus detection via a malicious ex (no CVSS)
- [CVE-2005-3232](https://cve.now/CVE-2005-3232.md): Multiple interpretation error in unspecified versions of TheHacker allows remote attackers to bypass virus detection via a malicious executa (no CVSS)
- [CVE-2005-3233](https://cve.now/CVE-2005-3233.md): Multiple interpretation error in unspecified versions of Trustix Antivirus allows remote attackers to bypass virus detection via a malicious (no CVSS)
- [CVE-2005-3234](https://cve.now/CVE-2005-3234.md): Multiple interpretation error in unspecified versions of Grisoft AVG Antivirus allows remote attackers to bypass virus detection via a malic (no CVSS)
- [CVE-2005-3235](https://cve.now/CVE-2005-3235.md): Multiple interpretation error in unspecified versions of Proland Protector Plus 2000 Antivirus allows remote attackers to bypass virus detec (no CVSS)
- [CVE-2005-3236](https://cve.now/CVE-2005-3236.md): Multiple SQL injection vulnerabilities in Cyphor 0.19 allow remote attackers to execute arbitrary SQL and obtain administrative access via ( (no CVSS)
- [CVE-2005-3237](https://cve.now/CVE-2005-3237.md): Cross-site scripting (XSS) vulnerability in Cyphor 0.19 allows remote attackers to inject arbitrary web script or HTML via the t\_login param (no CVSS)
- [CVE-2005-3238](https://cve.now/CVE-2005-3238.md): Multiple unspecified vulnerabilities in Solaris 10 SCTP Socket Option Processing allows local users to cause a denial of service (panic) via (no CVSS)
- [CVE-2005-3239](https://cve.now/CVE-2005-3239.md): The OLE2 unpacker in clamd in Clam AntiVirus (ClamAV) 0.87-1 allows remote attackers to cause a denial of service (segmentation fault) via a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-10-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.