# CVEs published 2005-11-19

11 CVEs were published on November 19, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-3683](https://cve.now/CVE-2005-3683.md): Stack-based buffer overflow in freeFTPd before 1.0.9 with Logging enabled, allows remote attackers to cause a denial of service (application (no CVSS)
- [CVE-2005-3684](https://cve.now/CVE-2005-3684.md): Multiple buffer overflows in freeFTPd 1.0.8, without logging enabled, allow remote authenticated attackers to cause a denial of service (app (no CVSS)
- [CVE-2005-3685](https://cve.now/CVE-2005-3685.md): Cross-site scripting (XSS) vulnerability in shopadmin.asp in VP-ASP Shopping Cart 5.50 allows remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2005-3686](https://cve.now/CVE-2005-3686.md): SQL injection vulnerability in search.inc.php in Unclassified NewsBoard before 1.5.3 Patch 4 allows remote attackers to execute arbitrary SQ (no CVSS)
- [CVE-2005-3687](https://cve.now/CVE-2005-3687.md): cancel\_account.php in WHM AutoPilot 2.5.30 and earlier allows remote attackers to cancel requests for arbitrary accounts via a modified c pa (no CVSS)
- [CVE-2005-3688](https://cve.now/CVE-2005-3688.md): Cross-site scripting (XSS) vulnerability in members.php in XMB 1.9.3 and earlier allows remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2005-3689](https://cve.now/CVE-2005-3689.md): post.php in XMB 1.9.2 allows remote attackers to obtain the installation path via an invalid fid parameter in a newthread action. (no CVSS)
- [CVE-2005-3690](https://cve.now/CVE-2005-3690.md): Stack-based buffer overflow in the IMAP service (meimaps.exe) of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allo (no CVSS)
- [CVE-2005-3691](https://cve.now/CVE-2005-3691.md): Directory traversal vulnerability in the IMAP service (meimaps.exe) of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlie (no CVSS)
- [CVE-2005-3692](https://cve.now/CVE-2005-3692.md): Cross-site scripting (XSS) vulnerability in AMAX Magic Winmail Server 4.2 (build 0824) and earlier allows remote attackers to inject arbitra (no CVSS)
- [CVE-2005-3693](https://cve.now/CVE-2005-3693.md): The AxWebRemoveCtrl ActiveX control for uninstalling the SunnComm MediaMax DRM allows remote attackers to download and execute arbitrary cod (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-11-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.