# CVEs published 2005-11-30 26 CVEs were published on November 30, 2005: 0 critical, 0 high. Days are UTC. - [CVE-2005-3904](https://cve.now/CVE-2005-3904.md): Unspecified vulnerability in Java Management Extensions (JMX) in Java JDK and JRE 5.0 Update 3, 1.4.2 and later, 1.3.1 and later allows remo (no CVSS) - [CVE-2005-3905](https://cve.now/CVE-2005-3905.md): Unspecified vulnerability in reflection APIs in Java SDK and JRE 1.3.1\_15 and earlier, 1.4.2\_08 and earlier, and JDK and JRE 5.0 Update 3 an (no CVSS) - [CVE-2005-3906](https://cve.now/CVE-2005-3906.md): Multiple unspecified vulnerabilities in reflection APIs in Java SDK and JRE 1.4.2\_08 and earlier and JDK and JRE 5.0 Update 3 and earlier al (no CVSS) - [CVE-2005-3907](https://cve.now/CVE-2005-3907.md): Unspecified vulnerability in Java Runtime Environment in Java JDK and JRE 5.0 Update 3 and earlier allows remote attackers to escape the Jav (no CVSS) - [CVE-2005-3908](https://cve.now/CVE-2005-3908.md): Cross-site scripting (XSS) vulnerability in search.php in GhostScripter Amazon Shop 5.0.0, and other versions before 5.0.2, allows remote at (no CVSS) - [CVE-2005-3909](https://cve.now/CVE-2005-3909.md): SQL injection vulnerability in merchants/index.php in Post Affiliate Pro 2.0.4 and earlier allows remote attackers to execute arbitrary SQL (no CVSS) - [CVE-2005-3910](https://cve.now/CVE-2005-3910.md): merchants/index.php in Post Affiliate Pro 2.0.4 and earlier, with magic\_quotes\_gpc disabled, allows remote attackers to include arbitrary lo (no CVSS) - [CVE-2005-3911](https://cve.now/CVE-2005-3911.md): Multiple SQL injection vulnerabilities in calendar.php in BosDates 4.0 and earlier allow remote attackers to execute arbitrary SQL commands (no CVSS) - [CVE-2005-3912](https://cve.now/CVE-2005-3912.md): Format string vulnerability in miniserv.pl Perl web server in Webmin before 1.250 and Usermin before 1.180, with syslog logging enabled, all (no CVSS) - [CVE-2005-3913](https://cve.now/CVE-2005-3913.md): Unspecified vulnerability in the domain alias management in Virtual Hosting Control System (VHCS) 2.4.6.2, related to "creating and deleting (no CVSS) - [CVE-2005-3914](https://cve.now/CVE-2005-3914.md): Multiple SQL injection vulnerabilities in AFFcommerce 1.1.4 allow remote attackers to execute arbitrary SQL commands via (1) the cl paramete (no CVSS) - [CVE-2005-3915](https://cve.now/CVE-2005-3915.md): The Internet Key Exchange version 1 (IKEv1) implementation in Clavister Client Web allows remote attackers to cause a denial of service and (no CVSS) - [CVE-2005-3916](https://cve.now/CVE-2005-3916.md): SQL injection vulnerability in memberlist.php in WSN Forum 1.21 allows remote attackers to execute arbitrary SQL commands via the id paramet (no CVSS) - [CVE-2005-3917](https://cve.now/CVE-2005-3917.md): SQL injection vulnerability in usersession in CommodityRentals 2.0 Online Rental Business Creator script allows remote attackers to execute (no CVSS) - [CVE-2005-3918](https://cve.now/CVE-2005-3918.md): Multiple SQL injection vulnerabilities in OvBB 0.08a allow remote attackers to execute arbitrary SQL commands via the (1) threadid parameter (no CVSS) - [CVE-2005-3919](https://cve.now/CVE-2005-3919.md): Cross-site scripting (XSS) vulnerability in PBLang 4.65 allows remote attackers to inject arbitrary web script or HTML via multiple fields i (no CVSS) - [CVE-2005-3920](https://cve.now/CVE-2005-3920.md): SQL injection vulnerability in Babe Logger 2 allows remote attackers to execute arbitrary SQL commands via the (1) gal parameter to index.ph (no CVSS) - [CVE-2005-3921](https://cve.now/CVE-2005-3921.md): Cross-site scripting (XSS) vulnerability in Cisco IOS Web Server for IOS 12.0(2a) allows remote attackers to inject arbitrary web script or (no CVSS) - [CVE-2005-3922](https://cve.now/CVE-2005-3922.md): Heap-based buffer overflow in pskcmp.dll in Panda Software Antivirus library allows remote attackers to execute arbitrary code via a crafted (no CVSS) - [CVE-2005-3923](https://cve.now/CVE-2005-3923.md): NetObjects Fusion 9 (NOF9) allows remote attackers to obtain sensitive information, including passwords, by downloading the \_versioning\_repo (no CVSS) - [CVE-2005-3924](https://cve.now/CVE-2005-3924.md): SQL injection vulnerability in themes/kategorie/index.php in Randshop allows remote attackers to execute arbitrary SQL commands via the (1) (no CVSS) - [CVE-2005-3925](https://cve.now/CVE-2005-3925.md): Multiple SQL injection vulnerabilities in Central Manchester CLC Helpdesk Issue Manager 0.9 and earlier allow remote attackers to execute ar (no CVSS) - [CVE-2005-3926](https://cve.now/CVE-2005-3926.md): Direct static code injection vulnerability in error.php in GuppY 4.5.9 and earlier, when register\_globals is disabled, allows remote attacke (no CVSS) - [CVE-2005-3927](https://cve.now/CVE-2005-3927.md): Multiple directory traversal vulnerabilities in GuppY 4.5.9 and earlier allow remote attackers to read and include arbitrary files via (1) t (no CVSS) - [CVE-2005-3928](https://cve.now/CVE-2005-3928.md): Buffer overflow in phgrafx in QNX 6.2.1 and 6.3.0 allows local users to execute arbitrary code via a long command line argument. (no CVSS) - [CVE-2005-3929](https://cve.now/CVE-2005-3929.md): Directory traversal vulnerability in the create function in xarMLSXML2PHPBackend.php in Xaraya 1.0 allows remote attackers to create directo (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2005-11-30 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.