# CVEs published 2005-12-07

26 CVEs were published on December 7, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-4045](https://cve.now/CVE-2005-4045.md): Unspecified vulnerability in System Communications Services 6 Delegated Administrator 2005Q1 in Sun Java System Messaging Server 2005Q1 allo (no CVSS)
- [CVE-2005-4046](https://cve.now/CVE-2005-4046.md): Unspecified vulnerability in Reverse SSL Proxy Plug-in for Sun Java System Application Server Standard Edition 7 2004Q2, Application Server (no CVSS)
- [CVE-2005-4047](https://cve.now/CVE-2005-4047.md): Cross-site scripting (XSS) vulnerability in kb.asp in IISWorks ASPKnowledgeBase 2.0 allows remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2005-4048](https://cve.now/CVE-2005-4048.md): Heap-based buffer overflow in the avcodec\_default\_get\_buffer function (utils.c) in FFmpeg libavcodec 0.4.9-pre1 and earlier, as used in prod (no CVSS)
- [CVE-2005-4049](https://cve.now/CVE-2005-4049.md): Multiple SQL injection vulnerabilities in Blog System 1.2 allow remote attackers to execute arbitrary SQL commands via (1) the cat parameter (no CVSS)
- [CVE-2005-4050](https://cve.now/CVE-2005-4050.md): Buffer overflow in multiple Multi-Tech Systems MultiVOIP devices with firmware before x.08 allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2005-4051](https://cve.now/CVE-2005-4051.md): e107 0.6174 allows remote attackers to vote multiple times for a download via repeated requests to rate.php. (no CVSS)
- [CVE-2005-4052](https://cve.now/CVE-2005-4052.md): e107 0.6174 allows remote attackers to redirect users to other web sites via the download parameter in rate.php, which is used after a user (no CVSS)
- [CVE-2005-4053](https://cve.now/CVE-2005-4053.md): Cross-site scripting (XSS) vulnerability in coWiki 0.3.4 allows remote attackers to inject arbitrary web script or HTML via the q parameter, (no CVSS)
- [CVE-2005-4054](https://cve.now/CVE-2005-4054.md): SQL injection vulnerability in index.php in PluggedOut Blog 1.9.5 and earlier allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2005-4055](https://cve.now/CVE-2005-4055.md): SQL injection vulnerability in index.php in Cars Portal 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1 (no CVSS)
- [CVE-2005-4056](https://cve.now/CVE-2005-4056.md): SQL injection vulnerability in search.php in PluggedOut Nexus 0.1 allows remote attackers to execute arbitrary SQL commands via the (1) Loca (no CVSS)
- [CVE-2005-4057](https://cve.now/CVE-2005-4057.md): Cross-site scripting (XSS) vulnerability in search.php in PluggedOut Nexus 0.1 allows remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2005-4058](https://cve.now/CVE-2005-4058.md): SQL injection vulnerability in saralblog 1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to vie (no CVSS)
- [CVE-2005-4059](https://cve.now/CVE-2005-4059.md): SQL injection vulnerability in searchdb.asp in LocazoList 1.03c and earlier allows remote attackers to execute arbitrary SQL commands via th (no CVSS)
- [CVE-2005-4060](https://cve.now/CVE-2005-4060.md): Cross-site scripting (XSS) vulnerability in search.asp in rwAuction Pro 4.0 and 5.0 allows remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2005-4061](https://cve.now/CVE-2005-4061.md): Cross-site scripting (XSS) vulnerability in PASearch.asp in XcPhotoAlbum 1.x allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2005-4062](https://cve.now/CVE-2005-4062.md): Cross-site scripting (XSS) vulnerability in CPSearch.asp in XcClassified 3.x allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2005-4063](https://cve.now/CVE-2005-4063.md): Multiple cross-site scripting (XSS) vulnerabilities in NetAuctionHelp 3.0 and earlier allow remote attackers to inject arbitrary HTML and we (no CVSS)
- [CVE-2005-4064](https://cve.now/CVE-2005-4064.md): Multiple SQL injection vulnerabilities in A-FAQ 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) faqid parameter to (no CVSS)
- [CVE-2005-4065](https://cve.now/CVE-2005-4065.md): SQL injection vulnerability in the search module in Edgewall Trac before 0.9.2 allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2005-4066](https://cve.now/CVE-2005-4066.md): Total Commander 6.53 uses weak encryption to store FTP usernames and passwords in WCX\_FTP.INI, which allows local users to decrypt the passw (no CVSS)
- [CVE-2005-2923](https://cve.now/CVE-2005-2923.md): The IMAP server in IMail Server 8.20 in Ipswitch Collaboration Suite (ICS) before 2.02 allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2005-2931](https://cve.now/CVE-2005-2931.md): Format string vulnerability in the SMTP service in IMail Server 8.20 in Ipswitch Collaboration Suite (ICS) before 2.02 allows remote attacke (no CVSS)
- [CVE-2005-3191](https://cve.now/CVE-2005-3191.md): Multiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream::readBaselineSOF functions in the DCT stream (no CVSS)
- [CVE-2005-3193](https://cve.now/CVE-2005-3193.md): Heap-based buffer overflow in the JPXStream::readCodestream function in the JPX stream parsing code (JPXStream.c) for xpdf 3.01 and earlier, (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-12-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.