# CVEs published 2005-12-17

44 CVEs were published on December 17, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-4342](https://cve.now/CVE-2005-4342.md): ColdFusion Sandbox on Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 does not throw an exception if the Security (no CVSS)
- [CVE-2005-4343](https://cve.now/CVE-2005-4343.md): Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 allows remote attackers to attach arbitrary files and send mail v (no CVSS)
- [CVE-2005-4344](https://cve.now/CVE-2005-4344.md): Adobe (formerly Macromedia) ColdFusion MX 7.0 does not honor when the CFOBJECT /CreateObject(Java) setting is disabled, which allows local u (no CVSS)
- [CVE-2005-4345](https://cve.now/CVE-2005-4345.md): Adobe (formerly Macromedia) ColdFusion MX 7.0 exposes the password hash of the Administrator in an API call, which allows local developers t (no CVSS)
- [CVE-2003-1289](https://cve.now/CVE-2003-1289.md): The iBCS2 system call translator for statfs in NetBSD 1.5 through 1.5.3 and FreeBSD 4 up to 4.8-RELEASE-p2 and 5 up to 5.1-RELEASE-p1 allows (no CVSS)
- [CVE-2005-4337](https://cve.now/CVE-2005-4337.md): The login page in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows (no CVSS)
- [CVE-2005-4338](https://cve.now/CVE-2005-4338.md): announcement.pl in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows (no CVSS)
- [CVE-2005-4339](https://cve.now/CVE-2005-4339.md): Cross-site scripting (XSS) vulnerability in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other (no CVSS)
- [CVE-2005-4341](https://cve.now/CVE-2005-4341.md): Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers t (no CVSS)
- [CVE-2005-4316](https://cve.now/CVE-2005-4316.md): HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows remote attackers to cause a denial of service via a "Rose Attack" that involves sending (no CVSS)
- [CVE-2005-4317](https://cve.now/CVE-2005-4317.md): Limbo CMS 1.0.4.2 and earlier, with register\_globals off, does not protect the $\_SERVER variable from external modification, which allows re (no CVSS)
- [CVE-2005-4318](https://cve.now/CVE-2005-4318.md): SQL injection vulnerability in index.php in Limbo CMS 1.0.4.2 and earlier, with register\_globals off, allows remote attackers to execute arb (no CVSS)
- [CVE-2005-4319](https://cve.now/CVE-2005-4319.md): Directory traversal vulnerability in index2.php in Limbo CMS 1.0.4.2 and earlier allows remote attackers to include arbitrary PHP files via (no CVSS)
- [CVE-2005-4320](https://cve.now/CVE-2005-4320.md): Limbo CMS 1.0.4.2 and earlier allows remote attackers to obtain the installation path of the application via a direct request to (1) doc.inc (no CVSS)
- [CVE-2005-4321](https://cve.now/CVE-2005-4321.md): The Internet Key Exchange version 1 (IKEv1) implementation in Apani Networks EpiForce 1.9 and earlier running IPSec, allow remote attackers (no CVSS)
- [CVE-2005-4322](https://cve.now/CVE-2005-4322.md): Multiple cross-site scripting (XSS) vulnerabilities in Hitachi Cosminexus Collaboration Portal 06-00 through 06-10-/B, Groupmax Collaboratio (no CVSS)
- [CVE-2005-4323](https://cve.now/CVE-2005-4323.md): Unspecified vulnerability in Hitachi Cosminexus Collaboration Portal 06-00 through 06-10-/B, Groupmax Collaboration Portal 07-00 through 07- (no CVSS)
- [CVE-2005-4324](https://cve.now/CVE-2005-4324.md): Hitachi Groupmax Mail SMTP 06-50 through 06-52-/A and 07-00 through 07-20 allows remote attackers to cause a denial of service (service stop (no CVSS)
- [CVE-2005-4325](https://cve.now/CVE-2005-4325.md): Multiple unspecified vulnerabilities in Driverse before 0.56b have unknown impact and attack vectors, related to (1) a "ptrace exploit" and (no CVSS)
- [CVE-2005-4326](https://cve.now/CVE-2005-4326.md): The web interface for American Power Conversion (APC) PowerChute Network Shutdown performs all communication in cleartext (base64-encoded), (no CVSS)
- [CVE-2005-4327](https://cve.now/CVE-2005-4327.md): Multiple cross-site scripting (XSS) vulnerabilities in Michael Arndt WebCal 1.11-3.04 allow remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2005-4328](https://cve.now/CVE-2005-4328.md): Cross-site scripting (XSS) vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2005-4329](https://cve.now/CVE-2005-4329.md): SQL injection vulnerability in pafiledb.php in PHP Arena paFileDB Extreme Edition RC 5 and earlier allows remote attackers to execute arbitr (no CVSS)
- [CVE-2005-4330](https://cve.now/CVE-2005-4330.md): SQL injection vulnerability in browse.ihtml in iHTML Merchant Mall allows remote attackers to execute arbitrary SQL commands via the (1) id, (no CVSS)
- [CVE-2005-4331](https://cve.now/CVE-2005-4331.md): SQL injection vulnerability in merchant.ihtml in iHTML Merchant Version 2 Pro allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2005-4332](https://cve.now/CVE-2005-4332.md): Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of serv (no CVSS)
- [CVE-2005-4333](https://cve.now/CVE-2005-4333.md): Multiple cross-site scripting (XSS) vulnerabilities in Binary Board System (BBS) 0.2.5 and earlier allow remote attackers to inject arbitrar (no CVSS)
- [CVE-2005-4334](https://cve.now/CVE-2005-4334.md): SQL injection vulnerability in ZixForum 1.12 allows remote attackers to execute arbitrary SQL commands via the H\_ID parameter to (1) zixforu (no CVSS)
- [CVE-2005-4335](https://cve.now/CVE-2005-4335.md): ProjectForum 4.7.0 and earlier allows remote attackers to cause a denial of service (crash) via a crafted pageid parameter to admin/versions (no CVSS)
- [CVE-2005-4336](https://cve.now/CVE-2005-4336.md): Cross-site scripting (XSS) vulnerability in ProjectForum 4.7.0 and earlier allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2005-4302](https://cve.now/CVE-2005-4302.md): Directory traversal vulnerability in index.php in ezDatabase 2.1.2 and earlier allows remote attackers to include arbitrary local files via (no CVSS)
- [CVE-2005-4303](https://cve.now/CVE-2005-4303.md): SQL injection vulnerability in index.php for ezDatabase 2.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2005-4304](https://cve.now/CVE-2005-4304.md): index.php in ezDatabase 2.1.2 and earlier allows remote attackers to obtain sensitive information via an invalid cat\_id parameter, which lea (no CVSS)
- [CVE-2005-4305](https://cve.now/CVE-2005-4305.md): Cross-site scripting (XSS) vulnerability in Edgewall Trac 0.9, 0.9.1, and 0.9.2 allows remote attackers to inject arbitrary web script or HT (no CVSS)
- [CVE-2005-4306](https://cve.now/CVE-2005-4306.md): Multiple cross-site scripting (XSS) vulnerabilities in SiteNet BBS 2.0 and earlier allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2005-4307](https://cve.now/CVE-2005-4307.md): Cross-site scripting (XSS) vulnerability in ScareCrow 2.13 and earlier allows remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2005-4308](https://cve.now/CVE-2005-4308.md): index.php in ezUpload Pro 2.2 and earlier allows remote attackers to include files via the mode parameter. (no CVSS)
- [CVE-2005-4309](https://cve.now/CVE-2005-4309.md): SQL injection vulnerability in ezUpload Pro 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified search (no CVSS)
- [CVE-2005-4310](https://cve.now/CVE-2005-4310.md): SSH Tectia Server 5.0.0 (A, F, and T), when allowing host-based authentication only, allows users to log in with the wrong credentials. (no CVSS)
- [CVE-2005-4311](https://cve.now/CVE-2005-4311.md): Cross-site scripting (XSS) vulnerability in DCForum 6.25 and earlier, and possibly DCForum+ 1.x, allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2005-4312](https://cve.now/CVE-2005-4312.md): SQL injection vulnerability in index.php in AlmondSoft Almond Classifieds 5.02 allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2005-4313](https://cve.now/CVE-2005-4313.md): SQL injection vulnerability in index.php in AlmondSoft Almond Personals 4.05 allows remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2005-4314](https://cve.now/CVE-2005-4314.md): Cross-site scripting (XSS) vulnerability in ppcal.cgi in PPCal Shopping Cart 3.3.0 and earlier allows remote attackers to inject arbitrary w (no CVSS)
- [CVE-2005-4315](https://cve.now/CVE-2005-4315.md): SQL injection vulnerability in the search function in Plexum PLEXCART X3 allows remote attackers to execute arbitrary SQL commands via unspe (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-12-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.