# CVEs published 2005-12-16 29 CVEs were published on December 16, 2005: 0 critical, 0 high. Days are UTC. - [CVE-2005-3652](https://cve.now/CVE-2005-3652.md): Heap-based buffer overflow in Citrix Program Neighborhood client 9.0 and earlier allows remote attackers to execute arbitrary code via a lon (no CVSS) - [CVE-2005-4297](https://cve.now/CVE-2005-4297.md): Cross-site scripting (XSS) vulnerability in bbBoard 2.56 and earlier allows remote attackers to inject arbitrary web script or HTML via unsp (no CVSS) - [CVE-2005-4298](https://cve.now/CVE-2005-4298.md): Cross-site scripting (XSS) vulnerability in atl.cgi in AtlantForum 4.02 and earlier allows remote attackers to inject arbitrary web script o (no CVSS) - [CVE-2005-4299](https://cve.now/CVE-2005-4299.md): Cross-site scripting (XSS) vulnerability in atl.cgi in Atlant Pro 4.02 and earlier allows remote attackers to inject arbitrary web script or (no CVSS) - [CVE-2005-4300](https://cve.now/CVE-2005-4300.md): Format string vulnerability in the lire\_pop function in pop.c in libremail 1.1.0 and earlier, with compiled with the debug option, allows re (no CVSS) - [CVE-2005-4301](https://cve.now/CVE-2005-4301.md): Cross-site scripting (XSS) vulnerability in phpXplorer 0.9.12 and earlier allows remote attackers to inject arbitrary web script or HTML via (no CVSS) - [CVE-2005-3253](https://cve.now/CVE-2005-3253.md): Wireless Access Points (AP) for (1) Avaya AP-3 through AP-6 2.5 to 2.5.4, and AP-7/AP-8 2.5 and other versions before 3.1, and (2) Proxim AP (no CVSS) - [CVE-2005-4275](https://cve.now/CVE-2005-4275.md): Scientific Atlanta DPX2100 Cable Modem allows remote attackers to cause a denial of service (device crash) via an IP packet with the same so (no CVSS) - [CVE-2005-4276](https://cve.now/CVE-2005-4276.md): Westell Versalink 327W allows remote attackers to cause a denial of service (device crash) via an IP packet with the same source and destina (no CVSS) - [CVE-2005-4277](https://cve.now/CVE-2005-4277.md): Cross-site scripting (XSS) vulnerability in index.php in toendaCMS before 0.7 Beta allows remote attackers to inject arbitrary web script or (no CVSS) - [CVE-2005-4278](https://cve.now/CVE-2005-4278.md): Untrusted search path vulnerability in Perl before 5.8.7-r1 on Gentoo Linux allows local users in the portage group to gain privileges via a (no CVSS) - [CVE-2005-4279](https://cve.now/CVE-2005-4279.md): Untrusted search path vulnerability in Qt-UnixODBC before 3.3.4-r1 on Gentoo Linux allows local users in the portage group to gain privilege (no CVSS) - [CVE-2005-4280](https://cve.now/CVE-2005-4280.md): Untrusted search path vulnerability in CMake before 2.2.0-r1 on Gentoo Linux allows local users in the portage group to gain privileges via (no CVSS) - [CVE-2005-4281](https://cve.now/CVE-2005-4281.md): Cross-site scripting (XSS) vulnerability in Zaygo HostingCart 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML (no CVSS) - [CVE-2005-4282](https://cve.now/CVE-2005-4282.md): Cross-site scripting (XSS) vulnerability in Zaygo DomainCart 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML, (no CVSS) - [CVE-2005-4283](https://cve.now/CVE-2005-4283.md): Cross-site scripting (XSS) vulnerability in The CITY Shop 1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via (no CVSS) - [CVE-2005-4284](https://cve.now/CVE-2005-4284.md): Cross-site scripting (XSS) vulnerability in StaticStore Search Engine 1.189A and earlier allows remote attackers to inject arbitrary web scr (no CVSS) - [CVE-2005-4285](https://cve.now/CVE-2005-4285.md): Cross-site scripting (XSS) vulnerability in pdestore.cgi in Dick Copits PDEstore 1.8 and earlier allows remote attackers to inject arbitrary (no CVSS) - [CVE-2005-4286](https://cve.now/CVE-2005-4286.md): Unspecified vulnerability in PhpLogCon before 1.2.2 allows remote attackers to use arbitrary profiles via unknown vectors involving "'smart' (no CVSS) - [CVE-2005-4287](https://cve.now/CVE-2005-4287.md): PHP remote file include vulnerability in MarmaraWeb E-commerce allows remote attackers to execute arbitrary code via the page parameter to i (no CVSS) - [CVE-2005-4288](https://cve.now/CVE-2005-4288.md): Cross-site scripting (XSS) vulnerability in index.php in MarmaraWeb E-commerce allows remote attackers to inject arbitrary web script or HTM (no CVSS) - [CVE-2005-4289](https://cve.now/CVE-2005-4289.md): Cross-site scripting (XSS) vulnerability in EDCstore.pl in eDatCat 0.3 allows remote attackers to inject arbitrary web script or HTML via th (no CVSS) - [CVE-2005-4290](https://cve.now/CVE-2005-4290.md): Cross-site scripting (XSS) vulnerability in index.cgi in ECW-Cart 2.03 and earlier allows remote attackers to inject arbitrary web script or (no CVSS) - [CVE-2005-4291](https://cve.now/CVE-2005-4291.md): Cross-site scripting (XSS) vulnerability in cart.cgi in ECTOOLS Onlineshop 1.0 and earlier allows remote attackers to inject arbitrary web s (no CVSS) - [CVE-2005-4292](https://cve.now/CVE-2005-4292.md): Cross-site scripting (XSS) vulnerability in CommerceSQL 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via u (no CVSS) - [CVE-2005-4293](https://cve.now/CVE-2005-4293.md): Cross-site scripting (XSS) vulnerability in cp-app.cgi in ClickCartPro (CCP) 5.1 and earlier allows remote attackers to inject arbitrary web (no CVSS) - [CVE-2005-4294](https://cve.now/CVE-2005-4294.md): Cross-site scripting (XSS) vulnerability in Alkacon OpenCms before 6.0.3 allows remote attackers to inject arbitrary web script or HTML via (no CVSS, org.opencms:opencms-core) - [CVE-2005-4295](https://cve.now/CVE-2005-4295.md): Cross-site scripting (XSS) vulnerability in Absolute Image Gallery XE 2.x allows remote attackers to inject arbitrary web script or HTML via (no CVSS) - [CVE-2005-4296](https://cve.now/CVE-2005-4296.md): AppServ Open Project 2.5.3 allows remote attackers to cause a denial of service via a large HTTP request. (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2005-12-16 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.