# Vulnerabilities published in 2005


- [CVE-2005-1501](https://insights.sbomify.com/CVE-2005-1501/): Information disclosure in midicart software:midicart php shopping cart (high 7.5)
- [CVE-2005-1500](https://insights.sbomify.com/CVE-2005-1500/): SQL injection in mywebland:mybloggie (high 7.5)
- [CVE-2005-1499](https://insights.sbomify.com/CVE-2005-1499/): Missing authorization in mywebland:mybloggie (high 7.5)
- [CVE-2005-1498](https://insights.sbomify.com/CVE-2005-1498/): Cross-site scripting in mywebland:mybloggie (medium 4.3)
- [CVE-2005-1497](https://insights.sbomify.com/CVE-2005-1497/): Information disclosure in mywebland:mybloggie (medium 5.0)
- [CVE-2005-1496](https://insights.sbomify.com/CVE-2005-1496/): Privilege escalation in oracle:application server (medium 4.6)
- [CVE-2005-1495](https://insights.sbomify.com/CVE-2005-1495/): Security feature bypass in oracle:application server (high 7.5)
- [CVE-2005-1494](https://insights.sbomify.com/CVE-2005-1494/): Cross-site scripting in megabook:megabook (medium 4.3)
- [CVE-2005-1493](https://insights.sbomify.com/CVE-2005-1493/): Path traversal in dead pirate software:simplecam (medium 5.0)
- [CVE-2005-1492](https://insights.sbomify.com/CVE-2005-1492/): Cross-site scripting in gossamer threads:gossamer threads links (medium 4.3)
- [CVE-2005-1491](https://insights.sbomify.com/CVE-2005-1491/): Missing authorization in icewarp:web mail (medium 4.6)
- [CVE-2005-1490](https://insights.sbomify.com/CVE-2005-1490/): Information disclosure in icewarp:web mail (low 2.1)
- [CVE-2005-1489](https://insights.sbomify.com/CVE-2005-1489/): Information disclosure in icewarp:web mail (medium 5.0)
- [CVE-2005-1488](https://insights.sbomify.com/CVE-2005-1488/): Cross-site scripting in icewarp:web mail (low 1.9)
- [CVE-2005-1487](https://insights.sbomify.com/CVE-2005-1487/): SQL injection in fishnet:fishcart (high 7.5)
- [CVE-2005-1486](https://insights.sbomify.com/CVE-2005-1486/): Cross-site scripting in fishnet:fishcart (medium 5.0)
- [CVE-2005-1485](https://insights.sbomify.com/CVE-2005-1485/): Information disclosure in kmint21 software:golden ftp server (medium 5.0)
- [CVE-2005-1484](https://insights.sbomify.com/CVE-2005-1484/): Path traversal in kmint21 software:golden ftp server (medium 5.0)
- [CVE-2005-1483](https://insights.sbomify.com/CVE-2005-1483/): Cross-site scripting in interspire:articlelive (medium 4.3)
- [CVE-2005-1482](https://insights.sbomify.com/CVE-2005-1482/): Auth bypass in interspire:articlelive (high 7.5)
- [CVE-2005-1481](https://insights.sbomify.com/CVE-2005-1481/): SQL injection in aaronoutpost:asp inline corporate calendar (high 7.5)
- [CVE-2005-1480](https://insights.sbomify.com/CVE-2005-1480/): Path traversal in raiden professional servers:raidenftpd (medium 5.0)
- [CVE-2005-1479](https://insights.sbomify.com/CVE-2005-1479/): SQL injection in jgs-xa:jgs-portal (high 7.5)
- [CVE-2005-1478](https://insights.sbomify.com/CVE-2005-1478/): Memory corruption in netwin:dmail (high 7.5)
- [CVE-2005-1477](https://insights.sbomify.com/CVE-2005-1477/): Code injection in mozilla:firefox (medium 5.1)
- [CVE-2005-1476](https://insights.sbomify.com/CVE-2005-1476/): Security feature bypass in mozilla:firefox (medium 5.1)
- [CVE-2005-1475](https://insights.sbomify.com/CVE-2005-1475/): Security feature bypass in opera:opera browser (high 7.5)
- [CVE-2005-1474](https://insights.sbomify.com/CVE-2005-1474/): Security feature bypass in apple:mac os x (high 7.5)
- [CVE-2005-1473](https://insights.sbomify.com/CVE-2005-1473/): Security feature bypass in apple:mac os x (medium 4.6)
- [CVE-2005-1472](https://insights.sbomify.com/CVE-2005-1472/): Security feature bypass in apple:mac os x (low 2.1)
- [CVE-2005-1471](https://insights.sbomify.com/CVE-2005-1471/): Memory corruption in rsa:securid web agent (high 7.5)
- [CVE-2005-1470](https://insights.sbomify.com/CVE-2005-1470/): Denial of service in ethereal group:ethereal (medium 5.0)
- [CVE-2005-1469](https://insights.sbomify.com/CVE-2005-1469/): Memory corruption in ethereal group:ethereal (medium 5.0)
- [CVE-2005-1468](https://insights.sbomify.com/CVE-2005-1468/): Null dereference in ethereal group:ethereal (medium 5.0)
- [CVE-2005-1467](https://insights.sbomify.com/CVE-2005-1467/): Denial of service in ethereal group:ethereal (medium 5.0)
- [CVE-2005-1466](https://insights.sbomify.com/CVE-2005-1466/): Denial of service in ethereal group:ethereal (medium 5.0)
- [CVE-2005-1465](https://insights.sbomify.com/CVE-2005-1465/): Denial of service in ethereal group:ethereal (medium 5.0)
- [CVE-2005-1464](https://insights.sbomify.com/CVE-2005-1464/): Denial of service in ethereal group:ethereal (medium 5.0)
- [CVE-2005-1463](https://insights.sbomify.com/CVE-2005-1463/): Memory corruption in ethereal group:ethereal (high 7.5)
- [CVE-2005-1462](https://insights.sbomify.com/CVE-2005-1462/): Memory corruption in ethereal group:ethereal (high 7.5)
- [CVE-2005-1461](https://insights.sbomify.com/CVE-2005-1461/): Memory corruption in ethereal group:ethereal (high 7.5)
- [CVE-2005-1460](https://insights.sbomify.com/CVE-2005-1460/): Denial of service in ethereal group:ethereal (medium 5.0)
- [CVE-2005-1459](https://insights.sbomify.com/CVE-2005-1459/): Denial of service in ethereal group:ethereal (medium 5.0)
- [CVE-2005-1458](https://insights.sbomify.com/CVE-2005-1458/): Other in ethereal group:ethereal (medium 5.0)
- [CVE-2005-1457](https://insights.sbomify.com/CVE-2005-1457/): Denial of service in ethereal group:ethereal (medium 5.0)
- [CVE-2005-1456](https://insights.sbomify.com/CVE-2005-1456/): Denial of service in ethereal group:ethereal (medium 5.0)
- [CVE-2005-1455](https://insights.sbomify.com/CVE-2005-1455/): Memory corruption in freeradius:freeradius (high 7.5)
- [CVE-2005-1454](https://insights.sbomify.com/CVE-2005-1454/): SQL injection in freeradius:freeradius (high 7.5)
- [CVE-2005-1453](https://insights.sbomify.com/CVE-2005-1453/): Denial of service in leafnode:leafnode (medium 5.0)
- [CVE-2005-1452](https://insights.sbomify.com/CVE-2005-1452/): Missing authorization in s9y:serendipity (critical 10.0)
- [CVE-2005-1451](https://insights.sbomify.com/CVE-2005-1451/): File upload in s9y:serendipity (high 7.5)
- [CVE-2005-1450](https://insights.sbomify.com/CVE-2005-1450/): Path traversal in s9y:serendipity (high 7.5)
- [CVE-2005-1449](https://insights.sbomify.com/CVE-2005-1449/): Other in s9y:serendipity (critical 10.0)
- [CVE-2005-1448](https://insights.sbomify.com/CVE-2005-1448/): Cross-site scripting in s9y:serendipity (medium 6.8)
- [CVE-2005-1447](https://insights.sbomify.com/CVE-2005-1447/): Code injection in sitepanel:sitepanel (high 7.5)
- [CVE-2005-1446](https://insights.sbomify.com/CVE-2005-1446/): File upload in sitepanel:sitepanel (high 7.5)
- [CVE-2005-1445](https://insights.sbomify.com/CVE-2005-1445/): Path traversal in sitepanel:sitepanel (medium 6.4)
- [CVE-2005-1444](https://insights.sbomify.com/CVE-2005-1444/): Cross-site scripting in sitepanel:sitepanel (medium 6.8)
- [CVE-2005-1443](https://insights.sbomify.com/CVE-2005-1443/): Multiple cross-site scripting (XSS) vulnerabilities in index.php for Invision Power Board (IPB) 2.0.3 and 2.1 Alpha 2 allows remote attacker (medium 6.8)
- [CVE-2005-1442](https://insights.sbomify.com/CVE-2005-1442/): Memory corruption in ibm:lotus notes (medium 4.6)
- [CVE-2005-1441](https://insights.sbomify.com/CVE-2005-1441/): Memory corruption in ibm:lotus domino (medium 5.0)
- [CVE-2005-1440](https://insights.sbomify.com/CVE-2005-1440/): Cross-site scripting in codetosell:viart shop enterprise (medium 6.8)
- [CVE-2005-1439](https://insights.sbomify.com/CVE-2005-1439/): Path traversal in enhancesoft:osticket (high 7.5)
- [CVE-2005-1438](https://insights.sbomify.com/CVE-2005-1438/): Code injection in osticket:osticket (high 7.5)
- [CVE-2005-1437](https://insights.sbomify.com/CVE-2005-1437/): SQL injection in osticket:osticket (high 7.5)
- [CVE-2005-1436](https://insights.sbomify.com/CVE-2005-1436/): Cross-site scripting in enhancesoft:osticket (medium 6.8)
- [CVE-2005-1435](https://insights.sbomify.com/CVE-2005-1435/): Command injection in open webmail:open webmail (high 7.5)
- [CVE-2005-1434](https://insights.sbomify.com/CVE-2005-1434/): Other in hp:openview network node manager (high 7.5)
- [CVE-2005-1433](https://insights.sbomify.com/CVE-2005-1433/): Other in hp:openview event correlation services (medium 4.6)
- [CVE-2005-1431](https://insights.sbomify.com/CVE-2005-1431/): Denial of service in gnu:gnutls (medium 5.0)
- [CVE-2005-1430](https://insights.sbomify.com/CVE-2005-1430/): Misconfiguration in apple:mac os x (low 3.6)
- [CVE-2005-1429](https://insights.sbomify.com/CVE-2005-1429/): SQL injection in abczone.it:wwwguestbook (high 7.5)
- [CVE-2005-1428](https://insights.sbomify.com/CVE-2005-1428/): edit_image.asp in Uapplication Uphotogallery allows remote attackers to upload arbitrary files. (high 7.5)
- [CVE-2005-1427](https://insights.sbomify.com/CVE-2005-1427/): Information disclosure in uapplication:uphotogallery (high 7.5)
- [CVE-2005-1426](https://insights.sbomify.com/CVE-2005-1426/): Uapplication Ublog Reload stores sensitive information under the web root with insufficient access control, which allows remote attackers to (medium 5.0)
- [CVE-2005-1425](https://insights.sbomify.com/CVE-2005-1425/): Information disclosure in uapplication:uguestbook (medium 5.0)
- [CVE-2005-1424](https://insights.sbomify.com/CVE-2005-1424/): Information disclosure in stumbleinside:gotext (low 2.1)
- [CVE-2005-1423](https://insights.sbomify.com/CVE-2005-1423/): Path traversal in software602:602lan suite (medium 6.4)
- [CVE-2005-1422](https://insights.sbomify.com/CVE-2005-1422/): Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to conduct administrator operations and cause a denial of service (serve (high 7.5)
- [CVE-2005-1421](https://insights.sbomify.com/CVE-2005-1421/): Path traversal in raysoft:video cam server (medium 5.0)
- [CVE-2005-1420](https://insights.sbomify.com/CVE-2005-1420/): Information disclosure in raysoft:video cam server (medium 5.0)
- [CVE-2005-1419](https://insights.sbomify.com/CVE-2005-1419/): SQL injection in ocean12 technologies:mailing list manager (high 7.5)
- [CVE-2005-1418](https://insights.sbomify.com/CVE-2005-1418/): Information disclosure in netleaf limited:notjustbrowsing (medium 4.6)
- [CVE-2005-1417](https://insights.sbomify.com/CVE-2005-1417/): SQL injection in maxwebportal:maxwebportal (high 7.5)
- [CVE-2005-1416](https://insights.sbomify.com/CVE-2005-1416/): Path traversal in soft3304:04webserver (medium 5.0)
- [CVE-2005-1415](https://insights.sbomify.com/CVE-2005-1415/): Memory corruption in globalscape:secure ftp server (critical 10.0)
- [CVE-2005-1414](https://insights.sbomify.com/CVE-2005-1414/): ExoticSoft FilePocket 1.2 stores sensitive proxy information, including proxy passwords, in plaintext in the registry, which allows local us (medium 4.6)
- [CVE-2005-1413](https://insights.sbomify.com/CVE-2005-1413/): SQL injection in envivosoft:envivo cms (high 7.5)
- [CVE-2005-1412](https://insights.sbomify.com/CVE-2005-1412/): SQL injection in ecomm:professional guestbook (high 7.5)
- [CVE-2005-1411](https://insights.sbomify.com/CVE-2005-1411/): Information disclosure in cybration:icuii (medium 4.6)
- [CVE-2005-1410](https://insights.sbomify.com/CVE-2005-1410/): Other in postgresql:postgresql (low 2.1)
- [CVE-2005-1409](https://insights.sbomify.com/CVE-2005-1409/): Missing authorization in postgresql:postgresql (high 7.5)
- [CVE-2005-1408](https://insights.sbomify.com/CVE-2005-1408/): Information disclosure in apple:keynote (medium 5.0)
- [CVE-2005-1407](https://insights.sbomify.com/CVE-2005-1407/): Security feature bypass in skype technologies:skype (medium 4.6)
- [CVE-2005-1406](https://insights.sbomify.com/CVE-2005-1406/): Information disclosure in freebsd:freebsd (medium 4.6)
- [CVE-2005-1405](https://insights.sbomify.com/CVE-2005-1405/): Other in ibm:lotus notes (low 2.1)
- [CVE-2005-1404](https://insights.sbomify.com/CVE-2005-1404/): Auth bypass in myphp forum:myphp forum (medium 5.0)
- [CVE-2005-1403](https://insights.sbomify.com/CVE-2005-1403/): Multiple cross-site scripting (XSS) vulnerabilities in JustWilliam's Amazon Webstore 04050100 allow remote attackers to inject arbitrary web (medium 6.8)
- [CVE-2005-1402](https://insights.sbomify.com/CVE-2005-1402/): Integer overflow in mtp-target:mtp-target (medium 5.0)
- [CVE-2005-1401](https://insights.sbomify.com/CVE-2005-1401/): Memory corruption in mtp-target:mtp-target (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2005/page/33/