2005 CVE Vulnerabilities

4,770 CVEs published in 2005.

CVE IDSeverityCVSSDescription
CVE-2005-2328PHP remote file inclusion vulnerability in im.php in Laffer 0.3.2.6 and 0.3.2.7 allows remote attackers to execute arbit...
CVE-2005-2332Cross-site scripting (XSS) vulnerability in PHPPageProtect 1.0.0a allows remote attackers to inject arbitrary web script...
CVE-2005-2331PHP remote file inclusion vulnerability in display.php in MooseGallery allows remote attackers to execute arbitrary PHP ...
CVE-2005-2324Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to inject arbitrary web scr...
CVE-2005-2320WebCalendar before 1.0.0 does not properly restrict access to assistant_edit.php, which allows remote attackers to gain ...
CVE-2005-2323Multiple SQL injection vulnerabilities in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allow ...
CVE-2005-2309Opera 8.01 allows remote attackers to cause a denial of service (CPU consumption) via a crafted JPEG image, as demonstra...
CVE-2005-2321PHP remote file inclusion vulnerability in CaLogic 1.2.2 allows remote attackers to execute arbitrary code via the CLPAT...
CVE-2005-2322Cross-site scripting (XSS) vulnerability in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allo...
CVE-2005-1530Sophos Anti-Virus 5.0.1, with "Scan inside archive files" enabled, allows remote attackers to cause a denial of service ...
CVE-2005-1850Certain contributed scripts for ekg Gadu Gadu client 1.5 and earlier create temporary files insecurely, with unknown imp...
CVE-2005-2301PowerDNS before 2.9.18, when running with an LDAP backend, does not properly escape LDAP queries, which allows remote at...
CVE-2005-1851A certain contributed script for ekg Gadu Gadu client 1.5 and earlier allows attackers to execute shell commands via unk...
CVE-2005-2302PowerDNS before 2.9.18, when allowing recursion to a restricted range of IP addresses, does not properly handle question...
CVE-2005-2304Microsoft MSN Messenger 9.0 and Internet Explorer 6.0 allows remote attackers to cause a denial of service (crash) via a...
CVE-2005-2305DG Remote Control Server 1.6.2 allows remote attackers to cause a denial of service (crash or CPU consumption) and possi...
CVE-2005-2300Skype 1.1.0.20 and earlier allows local users to overwrite arbitrary files via a symlink attack on the skype_profile.jpg...
CVE-2005-2306Race condition in Macromedia JRun 4.0, ColdFusion MX 6.1 and 7.0, when under heavy load, causes JRun to assign a duplica...
CVE-2005-2299Multiple cross-site scripting (XSS) vulnerabilities in Simple Message Board Version 2.0 Beta 1 allow remote attackers to...
CVE-2005-2298BitDefender Engine 1.6.1 and earlier does not properly scan all attachments, which allows remote attackers to bypass vir...
CVE-2005-2297Stack-based buffer overflow in TreeAction.do in Sybase EAServer 4.2.5 through 5.2 allows remote authenticated users to e...
CVE-2005-2310Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute arb...
CVE-2005-2311SMS 1.9.2m and earlier allows local users to overwrite arbitrary files via a symlink attack on the (1) request1 or (2) r...
CVE-2005-2312management.php in Realnode Emilda 1.2.2 and earlier allows remote attackers to perform actions as other users by modifyi...
CVE-2005-2196The Apple AirPort card uses a default WEP key when not connected to a known or trusted network, which can cause it to au...

Check if your code is affected by 2005 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now