# CVEs published 2005-11-28

18 CVEs were published on November 28, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2004-2573](https://cve.now/CVE-2004-2573.md): PHP remote file inclusion vulnerability in tables\_update.inc.php in phpGroupWare 0.9.14.005 and earlier allows remote attackers to execute a (no CVSS)
- [CVE-2004-2574](https://cve.now/CVE-2004-2574.md): Cross-site scripting (XSS) vulnerability in index.php in phpGroupWare 0.9.14.005 and earlier allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2004-2575](https://cve.now/CVE-2004-2575.md): phpGroupWare 0.9.14.005 and earlier allow remote attackers to obtain sensitive information via a direct request to (1) hook\_admin.inc.php, ( (no CVSS)
- [CVE-2004-2576](https://cve.now/CVE-2004-2576.md): class.vfs\_dav.inc.php in phpGroupWare 0.9.16.000 does not create .htaccess files to enable authorization checks for access to users' home-di (no CVSS)
- [CVE-2004-2577](https://cve.now/CVE-2004-2577.md): The acl\_check function in phpGroupWare 0.9.16RC2 always returns True, even when mkdir does not behave as expected, which could allow remote (no CVSS)
- [CVE-2004-2578](https://cve.now/CVE-2004-2578.md): phpGroupWare before 0.9.16.002 transmits the (1) header admin and (2) setup passwords in plaintext via cookies, which allows remote attacker (no CVSS)
- [CVE-2004-2579](https://cve.now/CVE-2004-2579.md): ACLCHECK module in Novell iChain 2.3 allows attackers to bypass access control rules of an unspecified component via an unspecified attack v (no CVSS)
- [CVE-2004-2580](https://cve.now/CVE-2004-2580.md): Cross-site scripting (XSS) vulnerability in Novell iChain 2.3 allows remote attackers to obtain login credentials via unspecified vectors. (no CVSS)
- [CVE-2004-2581](https://cve.now/CVE-2004-2581.md): Novell iChain 2.3 allows attackers to cause a denial of service via a URL with a "specific string." (no CVSS)
- [CVE-2004-2582](https://cve.now/CVE-2004-2582.md): Novell iChain 2.3 includes the build number in the VIA line of the proxy server's HTTP headers, which allows remote attackers to obtain sens (no CVSS)
- [CVE-2004-2583](https://cve.now/CVE-2004-2583.md): SMTP service in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to cause a denial of service (CPU consumption) via a (no CVSS)
- [CVE-2004-2584](https://cve.now/CVE-2004-2584.md): frmAddfolder.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote authenticated users to create a folder that SmarterMail ca (no CVSS)
- [CVE-2004-2585](https://cve.now/CVE-2004-2585.md): Cross-site scripting (XSS) vulnerability in frmCompose.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to inj (no CVSS)
- [CVE-2004-2586](https://cve.now/CVE-2004-2586.md): Directory traversal vulnerability in frmGetAttachment.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to read (no CVSS)
- [CVE-2004-2587](https://cve.now/CVE-2004-2587.md): login.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to cause a denial of service via a long txtusername par (no CVSS)
- [CVE-2004-2588](https://cve.now/CVE-2004-2588.md): Intentional information leak in phpinfo.php in XMB (aka extreme message board) 1.9 beta (aka Nexus beta) allows remote attackers to obtain s (no CVSS)
- [CVE-2004-2589](https://cve.now/CVE-2004-2589.md): Gaim before 0.82 allows remote servers to cause a denial of service (application crash) via a long HTTP Content-Length header, which causes (no CVSS)
- [CVE-2004-2590](https://cve.now/CVE-2004-2590.md): Unspecified vulnerability in meindlSOFT Cute PHP Library (aka cphplib) 0.46 has unknown impact and attack vectors, related to regular expres (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-11-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.