# CVEs published 2005-12-08 29 CVEs were published on December 8, 2005: 0 critical, 0 high. Days are UTC. - [CVE-2005-3661](https://cve.now/CVE-2005-3661.md): Dell TrueMobile 2300 Wireless Broadband Router running firmware 3.0.0.8 and 5.1.1.6, and possibly other versions, allows remote attackers to (no CVSS) - [CVE-2005-3665](https://cve.now/CVE-2005-3665.md): Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.7.0 allow remote attackers to inject arbitrary web script or HTML (no CVSS) - [CVE-2005-4086](https://cve.now/CVE-2005-4086.md): Directory traversal vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and e (no CVSS) - [CVE-2005-4087](https://cve.now/CVE-2005-4087.md): PHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta a (no CVSS) - [CVE-2005-4088](https://cve.now/CVE-2005-4088.md): SQL injection vulnerability in index.php in phpForumPro 2.2 allows remote attackers to execute arbitrary SQL commands via the (1) parent and (no CVSS) - [CVE-2005-4089](https://cve.now/CVE-2005-4089.md): Microsoft Internet Explorer allows remote attackers to bypass cross-domain security restrictions and obtain sensitive information by using t (no CVSS) - [CVE-2005-4090](https://cve.now/CVE-2005-4090.md): Unspecified vulnerability in HP-UX B.11.00 to B.11.23, when IPSEC is running, allows remote attackers to have unknown impact. (no CVSS) - [CVE-2005-4091](https://cve.now/CVE-2005-4091.md): Cross-site scripting (XSS) vulnerability in 1search.cgi in 1-Script 1-Search 1.8 allows remote attackers to inject arbitrary web script or H (no CVSS) - [CVE-2005-4092](https://cve.now/CVE-2005-4092.md): Multiple heap-based buffer overflows in QuickTime.qts in Apple QuickTime Player 7.0.3 and iTunes 6.0.1 (3) and earlier allow remote attacker (no CVSS) - [CVE-2005-4093](https://cve.now/CVE-2005-4093.md): Check Point VPN-1 SecureClient NG with Application Intelligence R56, NG FP1, 4.0, and 4.1 allows remote attackers to bypass security policie (no CVSS) - [CVE-2005-4094](https://cve.now/CVE-2005-4094.md): connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to execute arbitrary PHP by using the FileUpload command (no CVSS) - [CVE-2005-4095](https://cve.now/CVE-2005-4095.md): Directory traversal vulnerability in connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to list arbitrary f (no CVSS) - [CVE-2005-3192](https://cve.now/CVE-2005-3192.md): Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, a (no CVSS) - [CVE-2005-4068](https://cve.now/CVE-2005-4068.md): Unspecified "absolute path vulnerability" in umountall in IBM AIX 5.1 through 5.3 allows local users to cause unknown impact via unknown vec (no CVSS) - [CVE-2005-4069](https://cve.now/CVE-2005-4069.md): SunnComm MediaMax DRM 5.0.21.0, as used by Sony BMG, assigns insecure Everyone/Full Control permissions to the "SunnComm Shared" directory, (no CVSS) - [CVE-2005-4071](https://cve.now/CVE-2005-4071.md): Multiple SQL injection vulnerabilities in CFMagic Magic Forum Personal 2.5 and earlier allow remote attackers to execute arbitrary SQL comma (no CVSS) - [CVE-2005-4072](https://cve.now/CVE-2005-4072.md): Cross-site scripting (XSS) vulnerability in CFMagic Magic Forum Personal 2.5 and earlier allows remote attackers to inject arbitrary web scr (no CVSS) - [CVE-2005-4073](https://cve.now/CVE-2005-4073.md): SQL injection vulnerability in view\_archive.cfm in CFMagic Magic List Pro 2.5 allows remote attackers to execute arbitrary SQL commands via (no CVSS) - [CVE-2005-4074](https://cve.now/CVE-2005-4074.md): Directory traversal vulnerability in index.cfm in CF\_Nuke 4.6 and earlier, when Sandbox Security is disabled, allows remote attackers to inc (no CVSS) - [CVE-2005-4075](https://cve.now/CVE-2005-4075.md): Multiple cross-site scripting (XSS) vulnerabilities in index.cfm in CF\_Nuke 4.6 and earlier allow remote attackers to inject arbitrary web s (no CVSS) - [CVE-2005-4076](https://cve.now/CVE-2005-4076.md): Buffer overflow in Appfluent Technology Database IDS 2.0 allows local users to execute arbitrary code via a long APPFLUENT\_HOME environment (no CVSS) - [CVE-2005-4077](https://cve.now/CVE-2005-4077.md): Multiple off-by-one errors in the cURL library (libcurl) 7.11.2 through 7.15.0 allow local users to trigger a buffer overflow and cause a de (no CVSS) - [CVE-2005-4078](https://cve.now/CVE-2005-4078.md): Multiple cross-site scripting (XSS) vulnerabilities in Ideal BB.NET 1.3 and earlier allow remote attackers to inject arbitrary web script or (no CVSS) - [CVE-2005-4079](https://cve.now/CVE-2005-4079.md): The register\_globals emulation in phpMyAdmin 2.7.0 rc1 allows remote attackers to exploit other vulnerabilities in phpMyAdmin by modifying t (no CVSS) - [CVE-2005-4080](https://cve.now/CVE-2005-4080.md): Horde IMP 4.0.4 and earlier does not sanitize strings containing UTF16 null characters, which allows remote attackers to conduct cross-site (no CVSS) - [CVE-2005-4081](https://cve.now/CVE-2005-4081.md): Multiple SQL injection vulnerabilities in Alisveristr E-commerce allow remote attackers to bypass authentication and possibly execute arbitr (no CVSS) - [CVE-2005-4082](https://cve.now/CVE-2005-4082.md): The dhcp.client program for QNX 4.25 vmware is setuid, possibly by default, which allows local users to modify the NIC configuration and con (no CVSS) - [CVE-2005-4083](https://cve.now/CVE-2005-4083.md): Directory traversal vulnerability in xs\_edit.php in the eXtreme Styles phpBB module 2.2.1 and earlier allows remote attackers to read arbitr (no CVSS) - [CVE-2005-4084](https://cve.now/CVE-2005-4084.md): xs\_edit.php in the phpBB eXtreme Styles module 2.2.1 and earlier allows remote attackers to obtain the installation path of the application (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2005-12-08 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.