# CVEs published 2005-12-03

15 CVEs were published on December 3, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-3966](https://cve.now/CVE-2005-3966.md): Cross-site scripting (XSS) vulnerability in search.jsp in Java Search Engine (JSE) 0.9.34 allows remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2005-3967](https://cve.now/CVE-2005-3967.md): Cross-site scripting (XSS) vulnerability in the dosearchsite.action module in Atlassian Confluence 2.0.1 Build 321 allows remote attackers t (no CVSS)
- [CVE-2005-3968](https://cve.now/CVE-2005-3968.md): SQL injection vulnerability in auth.inc.php in PHPX 3.5.9 and earlier allows remote attackers to execute arbitrary SQL commands, bypass auth (no CVSS)
- [CVE-2005-3969](https://cve.now/CVE-2005-3969.md): SQL injection vulnerability in MXChange before 0.2.0-pre10 PL492 allows remote attackers to execute arbitrary SQL commands via unknown vecto (no CVSS)
- [CVE-2005-3970](https://cve.now/CVE-2005-3970.md): Cross-site scripting (XSS) vulnerability in MXChange before 0.2.0-pre10 PL492 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2005-3971](https://cve.now/CVE-2005-3971.md): Cross-site scripting (XSS) vulnerability in the login form in Citrix MetaFrame Secure Access Manager 2.0 through 2.2 and NFuse Elite 1.0 all (no CVSS)
- [CVE-2005-3972](https://cve.now/CVE-2005-3972.md): Cross-site scripting (XSS) vulnerability in extremesearch.php in Extreme Search Corporate Edition 6.0 and earlier allows remote attackers to (no CVSS)
- [CVE-2005-3973](https://cve.now/CVE-2005-3973.md): Multiple cross-site scripting (XSS) vulnerabilities in Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3 allow remote attackers to inject a (no CVSS)
- [CVE-2005-3974](https://cve.now/CVE-2005-3974.md): Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3, when running on PHP5, does not correctly enforce user privileges, which allows remote at (no CVSS)
- [CVE-2005-3975](https://cve.now/CVE-2005-3975.md): Interpretation conflict in file.inc in Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3 allows remote authenticated users to inject arbitr (no CVSS)
- [CVE-2005-3976](https://cve.now/CVE-2005-3976.md): SQL injection vulnerability in type.asp, as used in multiple DUware products including (1) DUamazon 3.1, (2) DUarticle 1.1, (3) DUclassified (no CVSS)
- [CVE-2005-3977](https://cve.now/CVE-2005-3977.md): Cross-site scripting (XSS) vulnerability in QualityEBiz Quality PPC 1553 allows remote attackers to inject web script or HTML via the REQ pa (no CVSS)
- [CVE-2005-3978](https://cve.now/CVE-2005-3978.md): Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition 1.0.1, Professional Edition 1.5.1, Standard Edition 1.9.6.3, and Fr (no CVSS)
- [CVE-2005-3979](https://cve.now/CVE-2005-3979.md): relocate\_server.php in Coppermine Photo Gallery (CPG) 1.4.2 and 1.4 beta is not removed after installation and does not use authentication, (no CVSS)
- [CVE-2004-2607](https://cve.now/CVE-2004-2607.md): A numeric casting discrepancy in sdla\_xfer in Linux kernel 2.6.x up to 2.6.5 and 2.4 up to 2.4.29-rc1 allows local users to read portions of (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-12-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.