# CVEs published 2005-12-30

5 CVEs were published on December 30, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-4586](https://cve.now/CVE-2005-4586.md): Multiple SQL injection vulnerabilities in PHPSurveyor before 0.991 allow remote attackers to execute arbitrary SQL commands via the (1) sql (no CVSS)
- [CVE-2005-4587](https://cve.now/CVE-2005-4587.md): Juniper NetScreen-Security Manager (NSM) 2004 FP2 and FP3 allow remote attackers to cause a denial of service (crash or hang of server compo (no CVSS)
- [CVE-2005-4588](https://cve.now/CVE-2005-4588.md): Cross-site scripting (XSS) vulnerability in Koobi 5 allows remote attackers to inject arbitrary web script or HTML via nested, malformed url (no CVSS)
- [CVE-2005-4589](https://cve.now/CVE-2005-4589.md): Spb Kiosk Engine 1.0.0.1 stores the administrator's passcode in the registry in plaintext, which allows local users to obtain the passcode. (no CVSS)
- [CVE-2005-4590](https://cve.now/CVE-2005-4590.md): Spb Kiosk Engine 1.0.0.1 allows local users to bypass restrictions on allowed applications via (1) removable media containing a program that (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-12-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.