# CVEs published 2005-12-09

14 CVEs were published on December 9, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2004-2650](https://cve.now/CVE-2004-2650.md): Spooler in Apache Foundation James 2.2.0 allows local users to cause a denial of service (memory consumption) by triggering various error co (no CVSS, org.apache.james:james-server)
- [CVE-2005-4133](https://cve.now/CVE-2005-4133.md): Sun Update Connection in Sun Solaris 10, when configured to use a web proxy, allows local users to obtain the proxy authentication password (no CVSS)
- [CVE-2005-4134](https://cve.now/CVE-2005-4134.md): Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of service (CPU consumptio (no CVSS)
- [CVE-2005-4135](https://cve.now/CVE-2005-4135.md): Direct static code injection vulnerability in includes/newtopic.php in SimpleBBS 1.1 and earlier allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2005-4136](https://cve.now/CVE-2005-4136.md): Cross-site scripting (XSS) vulnerability in login.php in DRZES HMS 3.2 allows remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2005-4137](https://cve.now/CVE-2005-4137.md): SQL injection vulnerability in viewinvoice.php in DRZES HMS 3.2 allows remote attackers to execute arbitrary SQL commands via the invoiceID (no CVSS)
- [CVE-2005-4138](https://cve.now/CVE-2005-4138.md): Multiple cross-site scripting (XSS) vulnerabilities in ThWboard before 3 Beta 2.84 allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2005-4139](https://cve.now/CVE-2005-4139.md): Multiple SQL injection vulnerabilities in ThWboard before 3 Beta 2.84 allow remote attackers to execute arbitrary SQL commands via the (1) y (no CVSS)
- [CVE-2005-4140](https://cve.now/CVE-2005-4140.md): SQL injection vulnerability in admin/login/index.php in Website Baker 2.6.0 allows remote attackers to execute arbitrary SQL commands via th (no CVSS)
- [CVE-2005-4141](https://cve.now/CVE-2005-4141.md): Multiple SQL injection vulnerabilities in ASPMForum allow remote attackers to execute arbitrary SQL commands via the (1) harf parameter in k (no CVSS)
- [CVE-2005-4126](https://cve.now/CVE-2005-4126.md): \*\* UNVERIFIABLE, PRERELEASE \*\* NOTE: this issue describes a problem that can not be independently verified as of 20051208. (no CVSS)
- [CVE-2005-4130](https://cve.now/CVE-2005-4130.md): \*\* UNVERIFIABLE, PRERELEASE \*\* NOTE: this issue describes a problem that can not be independently verified as of 20051208. (no CVSS)
- [CVE-2005-4131](https://cve.now/CVE-2005-4131.md): Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted att (no CVSS)
- [CVE-2005-4132](https://cve.now/CVE-2005-4132.md): Unspecified "security leak" vulnerability in Contenido before 4.6.4, when register\_globals is on and allow\_url\_fopen is true, has unspecifie (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-12-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.