# CVEs published 2005-11-21

37 CVEs were published on November 21, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-2339](https://cve.now/CVE-2005-2339.md): Cross-site scripting (XSS) vulnerability in the Unicode version of msearch (unicode-msearch) 1.51(U1)-beta1, 1.51(U1), and 1.52(U1) allows r (no CVSS)
- [CVE-2005-3733](https://cve.now/CVE-2005-3733.md): The Internet Key Exchange version 1 (IKEv1) implementation in Juniper JUNOS and JUNOSe software for M, T, and J-series routers before releas (no CVSS)
- [CVE-2005-3632](https://cve.now/CVE-2005-3632.md): Multiple buffer overflows in pnmtopng in netpbm 10.0 and earlier allow attackers to execute arbitrary code via a crafted PNM file. (no CVSS)
- [CVE-2005-3732](https://cve.now/CVE-2005-3732.md): The Internet Key Exchange version 1 (IKEv1) implementation (isakmp\_agg.c) in racoon in ipsec-tools before 0.6.3, when running in aggressive (no CVSS)
- [CVE-2004-2546](https://cve.now/CVE-2004-2546.md): Multiple memory leaks in Samba before 3.0.6 allow attackers to cause a denial of service (memory consumption). (no CVSS)
- [CVE-2004-2547](https://cve.now/CVE-2004-2547.md): NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to obtain sensitive information via HTTP requests that (a) specify t (no CVSS)
- [CVE-2004-2548](https://cve.now/CVE-2004-2548.md): Multiple cross-site scripting (XSS) vulnerabilities in NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to inject arb (no CVSS)
- [CVE-2004-2549](https://cve.now/CVE-2004-2549.md): Nortel Wireless LAN (WLAN) Access Point (AP) 2220, 2221, and 2225 allow remote attackers to cause a denial of service (service crash) via a (no CVSS)
- [CVE-2004-2550](https://cve.now/CVE-2004-2550.md): Multiple cross-site scripting (XSS) vulnerabilities in unspecified Perl scripts in SandSurfer before 1.7.1 allow remote attackers to inject (no CVSS)
- [CVE-2004-2551](https://cve.now/CVE-2004-2551.md): Multiple SQL injection vulnerabilities in Layton HelpBox 3.0.1 allow remote attackers to execute arbitrary SQL commands via (1) the sys\_comm (no CVSS)
- [CVE-2004-2552](https://cve.now/CVE-2004-2552.md): Buffer overflow in XBoard 4.2.7 and earlier might allow local users to execute arbitrary code via a long -icshost command line argument. (no CVSS)
- [CVE-2004-2553](https://cve.now/CVE-2004-2553.md): The Ignition Project ignitionServer 0.1.2 through 0.1.2-R2 allows remote authenticated users with local IRC operator privileges to obtain gl (no CVSS)
- [CVE-2004-2554](https://cve.now/CVE-2004-2554.md): Novell Client Firewall (NCF) 2.0, as based on the Agnitum Outpost Firewall, allows local users to execute arbitrary code with SYSTEM privile (no CVSS)
- [CVE-2004-2555](https://cve.now/CVE-2004-2555.md): Riverdeep FoolProof Security 3.9.x on Windows 98 and Windows ME uses weak cryptography (arithmetic and XOR operations) to relate the Control (no CVSS)
- [CVE-2004-2556](https://cve.now/CVE-2004-2556.md): NetGear WG602 (aka WG602v1) Wireless Access Point firmware 1.04.0 and 1.5.67 has a hardcoded account of username "super" and password "57773 (no CVSS)
- [CVE-2004-2557](https://cve.now/CVE-2004-2557.md): NetGear WG602 (aka WG602v1) Wireless Access Point 1.7.14 has a hardcoded account of username "superman" and password "21241036", which allow (no CVSS)
- [CVE-2004-2558](https://cve.now/CVE-2004-2558.md): Unspecified vulnerability in IBM Tivoli SecureWay Policy Director 3.8, Access Manager for e-business 3.9 to 5.1, Access Manager Identity Man (no CVSS)
- [CVE-2005-3697](https://cve.now/CVE-2005-3697.md): Unspecified vulnerability in the administration interface in Uresk Links 2.0 Lite allows remote attackers to bypass authentication via unspe (no CVSS)
- [CVE-2005-3698](https://cve.now/CVE-2005-3698.md): PHP Easy Download allows remote attackers to bypass authentication via edit.php. (no CVSS)
- [CVE-2005-3699](https://cve.now/CVE-2005-3699.md): Opera Web Browser 8.50 and 8.0 through 8.0.2 allows remote attackers to spoof the URL in the status bar via the title in an image in a link (no CVSS)
- [CVE-2005-3715](https://cve.now/CVE-2005-3715.md): Senao SI-680H Wireless VoIP Phone Firmware 0.03.0839 leaves the VxWorks debugger UDP port 17185 available without authentication, which allo (no CVSS)
- [CVE-2005-3716](https://cve.now/CVE-2005-3716.md): The SNMP daemon in UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 has hard-coded public credentials that ca (no CVSS)
- [CVE-2005-3717](https://cve.now/CVE-2005-3717.md): The telnet daemon in UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 has a default username "target" and pas (no CVSS)
- [CVE-2005-3718](https://cve.now/CVE-2005-3718.md): UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 does not allow users to disable access to (1) SNMP or (2) th (no CVSS)
- [CVE-2005-3719](https://cve.now/CVE-2005-3719.md): Hitachi IP5000 VOIP WIFI Phone 1.5.6 has a hard-coded administrator password of "0000", which allows attackers with physical access to obtai (no CVSS)
- [CVE-2005-3720](https://cve.now/CVE-2005-3720.md): The default index page in the HTTP server in Hitachi IP5000 VOIP WIFI Phone 1.5.6 lists sensitive information such as software versions. (no CVSS)
- [CVE-2005-3721](https://cve.now/CVE-2005-3721.md): The default configuration of the HTTP server in Hitachi IP5000 VOIP WIFI Phone 1.5.6 does not require authentication for sensitive configura (no CVSS)
- [CVE-2005-3722](https://cve.now/CVE-2005-3722.md): The SNMP v1/v2c daemon in Hitachi IP5000 VOIP WIFI Phone 1.5.6 allows remote attackers to gain read or write access to system configuration (no CVSS)
- [CVE-2005-3723](https://cve.now/CVE-2005-3723.md): Hitachi IP5000 VOIP WIFI Phone 1.5.6 does not allow the user to disable access to (1) SNMP or (2) TCP port 3390, which allows remote attacke (no CVSS)
- [CVE-2005-3724](https://cve.now/CVE-2005-3724.md): Zyxel P2000W Version 1 VOIP WIFI Phone Wj.00.10 allows remote attackers to obtain sensitive information and possibly cause a denial of servi (no CVSS)
- [CVE-2005-3725](https://cve.now/CVE-2005-3725.md): Zyxel P2000W Version 1 VOIP WIFI Phone Wj.00.10 uses hardcoded IP addresses for its DNS servers, which could allow remote attackers to cause (no CVSS)
- [CVE-2005-3726](https://cve.now/CVE-2005-3726.md): SQL injection vulnerability in Interspire ArticleLive NX 0.3 allows remote attackers to execute arbitrary SQL commands via the Query paramet (no CVSS)
- [CVE-2005-3727](https://cve.now/CVE-2005-3727.md): SQL injection vulnerability in debug/query\_results.jsp in Idetix Software Systems Revize CMS allows remote attackers to execute arbitrary SQ (no CVSS)
- [CVE-2005-3728](https://cve.now/CVE-2005-3728.md): Idetix Software Systems Revize CMS stores conf/revize.xml under the web document root with insufficient access control, which allows remote (no CVSS)
- [CVE-2005-3729](https://cve.now/CVE-2005-3729.md): Idetix Software Systems Revize CMS allows remote attackers to obtain sensitive information via direct requests to files in the revize/debug (no CVSS)
- [CVE-2005-3730](https://cve.now/CVE-2005-3730.md): Multiple cross-site scripting (XSS) vulnerabilities in HTTPTranslatorServlet in Idetix Software Systems Revize CMS allow remote attackers to (no CVSS)
- [CVE-2005-3731](https://cve.now/CVE-2005-3731.md): Unspecified vulnerability in yaSSL before 1.0.6 has unknown impact and attack vectors, related to "certificate chain processing." (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-11-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.