# CVEs published 2005-11-17

7 CVEs were published on November 17, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-3644](https://cve.now/CVE-2005-3644.md): PNP\_GetDeviceList (upnp\_getdevicelist) in UPnP for Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows r (no CVSS)
- [CVE-2005-3645](https://cve.now/CVE-2005-3645.md): phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allows remote attackers to obtain the application installation path and other sen (no CVSS)
- [CVE-2005-3646](https://cve.now/CVE-2005-3646.md): Multiple SQL injection vulnerabilities in lib-sessions.inc.php in phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allow remote at (no CVSS)
- [CVE-2005-3647](https://cve.now/CVE-2005-3647.md): Folder Guard allows local users to bypass protections by running from or installing to the temporary files directory. (no CVSS)
- [CVE-2005-3648](https://cve.now/CVE-2005-3648.md): Multiple SQL injection vulnerabilities in the get\_record function in datalib.php in Moodle 1.5.2 allow remote attackers to execute arbitrary (no CVSS)
- [CVE-2005-3649](https://cve.now/CVE-2005-3649.md): jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter. (no CVSS)
- [CVE-2005-3650](https://cve.now/CVE-2005-3650.md): The CodeSupport.ocx ActiveX control, as used by Sony to uninstall the First4Internet XCP DRM, has "safe for scripting" enabled, which allows (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-11-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.