# CVEs published 2005-12-14

49 CVEs were published on December 14, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-1928](https://cve.now/CVE-2005-1928.md): Trend Micro ServerProtect EarthAgent for Windows Management Console 5.58 and possibly earlier versions, when running with Trend Micro Contro (no CVSS)
- [CVE-2005-1929](https://cve.now/CVE-2005-1929.md): Multiple heap-based buffer overflows in (1) isaNVWRequest.dll and (2) relay.dll in Trend Micro ServerProtect Management Console 5.58 and ear (no CVSS)
- [CVE-2005-1930](https://cve.now/CVE-2005-1930.md): Directory traversal vulnerability in the Crystal Report component (rptserver.asp) in Trend Micro ServerProtect Management Console 5.58, as u (no CVSS)
- [CVE-2005-3360](https://cve.now/CVE-2005-3360.md): The installation of Trend Micro PC-Cillin Internet Security 2005 12.00 build 1244, and probably previous versions, uses insecure default ACL (no CVSS)
- [CVE-2005-3358](https://cve.now/CVE-2005-3358.md): Linux kernel before 2.6.15 allows local users to cause a denial of service (panic) via a set\_mempolicy call with a 0 bitmask, which causes a (no CVSS)
- [CVE-2005-4242](https://cve.now/CVE-2005-4242.md): Multiple cross-site scripting (XSS) vulnerabilities in Horde Turba H3 2.0.4 and earlier allow remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2005-2829](https://cve.now/CVE-2005-2829.md): Multiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted attackers to execute arbitrary code by (1) overla (no CVSS)
- [CVE-2005-2830](https://cve.now/CVE-2005-2830.md): Microsoft Internet Explorer 5.01, 5.5, and 6, when using an HTTPS proxy server that requires Basic Authentication, sends URLs in cleartext, (no CVSS)
- [CVE-2005-2831](https://cve.now/CVE-2005-2831.md): Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute a (no CVSS)
- [CVE-2005-3903](https://cve.now/CVE-2005-3903.md): Buffer overflow in uidadmin in SCO Unixware 7.1.3 and 7.1.4 allows local users to execute arbitrary code via a -S (scheme) argument that spe (no CVSS)
- [CVE-2005-4211](https://cve.now/CVE-2005-4211.md): PHP remote file inclusion vulnerability in coin\_includes/db.php in phpCOIN 1.2.2 allows remote attackers to execute arbitrary PHP code via a (no CVSS)
- [CVE-2005-4212](https://cve.now/CVE-2005-4212.md): Directory traversal vulnerability in coin\_includes/db.php in phpCOIN 1.2.2 allows remote attackers to read arbitrary local files via ".." (d (no CVSS)
- [CVE-2005-4213](https://cve.now/CVE-2005-4213.md): SQL injection vulnerability in mod.php in phpCOIN 1.2.2 allows remote attackers to execute arbitrary SQL commands via the phpcoinsessid cook (no CVSS)
- [CVE-2005-4214](https://cve.now/CVE-2005-4214.md): phpCOIN 1.2.2 allows remote attackers to obtain the installation path via a direct request to config.php, which leaks the path in an error m (no CVSS)
- [CVE-2005-4215](https://cve.now/CVE-2005-4215.md): Motorola SB5100E Cable Modem allows remote attackers to cause a denial of service (device crash) via an IP packet with the same source and d (no CVSS)
- [CVE-2005-4216](https://cve.now/CVE-2005-4216.md): The Administration Service (FMSAdmin.exe) in Macromedia Flash Media Server 2.0 r1145 allows remote attackers to cause a denial of service (a (no CVSS)
- [CVE-2005-4217](https://cve.now/CVE-2005-4217.md): Perl in Apple Mac OS X Server 10.3.9 does not properly drop privileges when using the "$\<" variable to set uid, which allows attackers to ga (no CVSS)
- [CVE-2005-4218](https://cve.now/CVE-2005-4218.md): SQL injection vulnerability in forum.php in PHPWebThings 1.4 allows remote attackers to execute arbitrary SQL commands via the msg parameter (no CVSS)
- [CVE-2005-4219](https://cve.now/CVE-2005-4219.md): setting.php in Innovative CMS (ICMS, formerly Imoel-CMS) contains username and password information in cleartext, which might allow attacker (no CVSS)
- [CVE-2005-4220](https://cve.now/CVE-2005-4220.md): Netgear RP114, and possibly other versions and devices, allows remote attackers to cause a denial of service via a SYN flood attack between (no CVSS)
- [CVE-2005-4221](https://cve.now/CVE-2005-4221.md): SQL injection vulnerability in link.php in Arab Portal System 2 Beta 2 allows remote attackers to execute arbitrary SQL commands via the (1) (no CVSS)
- [CVE-2005-4222](https://cve.now/CVE-2005-4222.md): Multiple cross-site scripting (XSS) vulnerabilities in guestbook.cgi in Lars Ellingsen Guestserver 4.13 and earlier allow remote attackers t (no CVSS)
- [CVE-2005-4223](https://cve.now/CVE-2005-4223.md): Multiple "potential" SQL injection vulnerabilities in Utopia News Pro (UNP) 1.1.4 might allow remote attackers to execute arbitrary SQL comm (no CVSS)
- [CVE-2005-4224](https://cve.now/CVE-2005-4224.md): Multiple "potential" SQL injection vulnerabilities in e107 0.7 might allow remote attackers to execute arbitrary SQL commands via (1) the em (no CVSS)
- [CVE-2005-4225](https://cve.now/CVE-2005-4225.md): Multiple "potential" SQL injection vulnerabilities in myBloggie 2.1.3 beta might allow remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2005-4226](https://cve.now/CVE-2005-4226.md): Multiple "potential" SQL injection vulnerabilities in phpWebThings 1.4 Patched might allow remote attackers to execute arbitrary SQL command (no CVSS)
- [CVE-2005-4227](https://cve.now/CVE-2005-4227.md): Multiple "potential" SQL injection vulnerabilities in DCP-Portal 6.1.1 might allow remote attackers to execute arbitrary SQL commands via (1 (no CVSS)
- [CVE-2005-4228](https://cve.now/CVE-2005-4228.md): Multiple SQL injection vulnerabilities in PhpWebGallery 1.5.1 and earlier allow remote attackers to execute arbitrary SQL commands via the ( (no CVSS)
- [CVE-2005-4229](https://cve.now/CVE-2005-4229.md): Cross-site scripting (XSS) vulnerability in auction.pl in EveryAuction 1.53 and earlier allows remote attackers to inject arbitrary web scri (no CVSS)
- [CVE-2005-4230](https://cve.now/CVE-2005-4230.md): SQL injection vulnerability in poll.php in Link Up Gold 2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the nu (no CVSS)
- [CVE-2005-4231](https://cve.now/CVE-2005-4231.md): Cross-site scripting (XSS) vulnerability in Link Up Gold 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2005-4232](https://cve.now/CVE-2005-4232.md): SQL injection vulnerability in index.php in Jamit Job Board 2.4.1 and earlier allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2005-4233](https://cve.now/CVE-2005-4233.md): SQL injection vulnerability in advertiser\_statistic.php in Ad Manager Pro 2.0 and earlier allows remote attackers to execute arbitrary SQL c (no CVSS)
- [CVE-2005-4234](https://cve.now/CVE-2005-4234.md): SQL injection vulnerability in gallery.php in EncapsGallery 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2005-4235](https://cve.now/CVE-2005-4235.md): Cross-site scripting (XSS) vulnerability in knowledgebase.php in WHMCompleteSolution 2.1 and earlier allows remote attackers to inject arbit (no CVSS)
- [CVE-2005-4236](https://cve.now/CVE-2005-4236.md): Cross-site scripting (XSS) vulnerability in search.php in CKGOLD allows remote attackers to inject arbitrary web script or HTML via the sear (no CVSS)
- [CVE-2005-4237](https://cve.now/CVE-2005-4237.md): Cross-site scripting (XSS) vulnerability in MySQL Auction 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2005-4238](https://cve.now/CVE-2005-4238.md): Cross-site scripting (XSS) vulnerability in view\_filters\_page.php in Mantis 1.0.0rc3 and earlier allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2005-4239](https://cve.now/CVE-2005-4239.md): Cross-site scripting (XSS) vulnerability in Search/DisplayResults.php in PHP JackKnife 2.21 and earlier allows remote attackers to inject ar (no CVSS)
- [CVE-2005-4240](https://cve.now/CVE-2005-4240.md): SQL injection vulnerability in search.php in VCD-db 0.98 and earlier allows remote attackers to execute arbitrary SQL commands via the by pa (no CVSS)
- [CVE-2005-4241](https://cve.now/CVE-2005-4241.md): Cross-site scripting (XSS) vulnerability in the category page in VCD-db 0.98 and earlier allows remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2005-4244](https://cve.now/CVE-2005-4244.md): SQL injection vulnerability in Snipe Gallery 3.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) gallery (no CVSS)
- [CVE-2005-4245](https://cve.now/CVE-2005-4245.md): Cross-site scripting (XSS) vulnerability in search.php in Snipe Gallery 3.1.4 and earlier allows remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2005-4246](https://cve.now/CVE-2005-4246.md): SQL injection vulnerability in Plogger Beta 2 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) id parameter (no CVSS)
- [CVE-2005-4247](https://cve.now/CVE-2005-4247.md): Cross-site scripting (XSS) vulnerability in index.php in Plogger Beta 2 and earlier allows remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2005-4250](https://cve.now/CVE-2005-4250.md): Directory traversal vulnerability in mcGallery PRO 2.2 and earlier allows remote attackers to read arbitrary files via the language paramete (no CVSS)
- [CVE-2005-4251](https://cve.now/CVE-2005-4251.md): Multiple SQL injection vulnerabilities in mcGallery PRO 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) (no CVSS)
- [CVE-2005-4252](https://cve.now/CVE-2005-4252.md): Cross-site scripting (XSS) vulnerability in mcGallery PRO 2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2005-2827](https://cve.now/CVE-2005-2827.md): The thread termination routine in the kernel for Windows NT 4.0 and 2000 (NTOSKRNL.EXE) allows local users to modify kernel memory and execu (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-12-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.