# Vulnerabilities published in 2005


- [CVE-2005-1185](https://insights.sbomify.com/CVE-2005-1185/): Privilege escalation in musicmatch:jukebox (medium 4.6)
- [CVE-2005-1184](https://insights.sbomify.com/CVE-2005-1184/): Denial of service in microsoft:windows 2000 (medium 5.0)
- [CVE-2005-1183](https://insights.sbomify.com/CVE-2005-1183/): Cross-site scripting in mvnforum:mvnforum (medium 4.3)
- [CVE-2005-1182](https://insights.sbomify.com/CVE-2005-1182/): Denial of service in ibm:os 400 (medium 5.0)
- [CVE-2005-1181](https://insights.sbomify.com/CVE-2005-1181/): Code injection in ariadne:ariadne cms (high 7.5)
- [CVE-2005-1180](https://insights.sbomify.com/CVE-2005-1180/): Other in francisco burzi:php-nuke (medium 5.0)
- [CVE-2005-1179](https://insights.sbomify.com/CVE-2005-1179/): Auth bypass in xerox:workcentre (medium 5.0)
- [CVE-2005-1178](https://insights.sbomify.com/CVE-2005-1178/): SQL injection in oracle:forms (high 7.5)
- [CVE-2005-1177](https://insights.sbomify.com/CVE-2005-1177/): Other in usermin:usermin (critical 10.0)
- [CVE-2005-1176](https://insights.sbomify.com/CVE-2005-1176/): Race condition in ibm:aix (low 1.2)
- [CVE-2005-1175](https://insights.sbomify.com/CVE-2005-1175/): Memory corruption in mit:kerberos 5 (high 7.5)
- [CVE-2005-1174](https://insights.sbomify.com/CVE-2005-1174/): Memory corruption in mit:kerberos 5 (medium 5.0)
- [CVE-2005-1173](https://insights.sbomify.com/CVE-2005-1173/): Memory corruption in pmsoftware:simple web server (high 7.5)
- [CVE-2005-1172](https://insights.sbomify.com/CVE-2005-1172/): Cross-site scripting in coppermine:coppermine photo gallery (medium 4.3)
- [CVE-2005-1171](https://insights.sbomify.com/CVE-2005-1171/): Cross-site scripting in datenbank module:datenbank module (medium 4.3)
- [CVE-2005-1170](https://insights.sbomify.com/CVE-2005-1170/): SQL injection in datenbank module:datenbank module (high 7.5)
- [CVE-2005-1169](https://insights.sbomify.com/CVE-2005-1169/): Code injection in mafia:mafia blog (high 7.5)
- [CVE-2005-1168](https://insights.sbomify.com/CVE-2005-1168/): Other in musicmatch:jukebox (medium 5.0)
- [CVE-2005-1167](https://insights.sbomify.com/CVE-2005-1167/): Information disclosure in musicmatch:jukebox (low 2.1)
- [CVE-2005-1166](https://insights.sbomify.com/CVE-2005-1166/): Information disclosure in dameware development:dameware nt utilities (low 2.1)
- [CVE-2005-1165](https://insights.sbomify.com/CVE-2005-1165/): Yager 5.24 and earlier allows remote attackers to cause a denial of service (application crash) via certain malformed data. (medium 5.0)
- [CVE-2005-1164](https://insights.sbomify.com/CVE-2005-1164/): Denial of service in yager development:yager game (medium 5.0)
- [CVE-2005-1163](https://insights.sbomify.com/CVE-2005-1163/): Memory corruption in yager development:yager game (medium 6.4)
- [CVE-2005-1162](https://insights.sbomify.com/CVE-2005-1162/): Cross-site scripting in oneworldstore:oneworldstore (medium 5.8)
- [CVE-2005-1161](https://insights.sbomify.com/CVE-2005-1161/): SQL injection in oneworldstore:oneworldstore (high 7.5)
- [CVE-2005-1160](https://insights.sbomify.com/CVE-2005-1160/): Privilege escalation in mozilla:firefox (medium 5.1)
- [CVE-2005-1159](https://insights.sbomify.com/CVE-2005-1159/): Memory corruption in mozilla:firefox (high 7.5)
- [CVE-2005-1158](https://insights.sbomify.com/CVE-2005-1158/): Security feature bypass in mozilla:firefox (medium 5.0)
- [CVE-2005-1157](https://insights.sbomify.com/CVE-2005-1157/): Security feature bypass in mozilla:firefox (high 7.5)
- [CVE-2005-1156](https://insights.sbomify.com/CVE-2005-1156/): Code injection in mozilla:firefox (high 7.5)
- [CVE-2005-1155](https://insights.sbomify.com/CVE-2005-1155/): Code injection in mozilla:firefox (high 7.5)
- [CVE-2005-1154](https://insights.sbomify.com/CVE-2005-1154/): Cross-site scripting in mozilla:firefox (high 7.5)
- [CVE-2005-1153](https://insights.sbomify.com/CVE-2005-1153/): Code injection in mozilla:firefox (high 7.5)
- [CVE-2005-1152](https://insights.sbomify.com/CVE-2005-1152/): Misconfiguration in debian:qpopper (low 2.1)
- [CVE-2005-1151](https://insights.sbomify.com/CVE-2005-1151/): Privilege escalation in debian:qpopper (high 7.2)
- [CVE-2005-1150](https://insights.sbomify.com/CVE-2005-1150/): Denial of service in sun:java system web server (medium 5.0)
- [CVE-2005-1149](https://insights.sbomify.com/CVE-2005-1149/): SQL injection vulnerability in admin/login.asp in aspclick.it ACNews 1.0 allows remote attackers to execute arbitrary SQL commands via the ( (high 7.5)
- [CVE-2005-1148](https://insights.sbomify.com/CVE-2005-1148/): Information disclosure in calendarscript:calendarscript (medium 5.0)
- [CVE-2005-1147](https://insights.sbomify.com/CVE-2005-1147/): calendar.pl in CalendarScript 3.20 allows remote attackers to obtain sensitive information via invalid (1) calendar or (2) template paramete (medium 5.0)
- [CVE-2005-1146](https://insights.sbomify.com/CVE-2005-1146/): Cross-site scripting in calendarscript:calendarscript (medium 4.3)
- [CVE-2005-1145](https://insights.sbomify.com/CVE-2005-1145/): Cross-site scripting in calendarscript:calendarscript (medium 4.3)
- [CVE-2005-1144](https://insights.sbomify.com/CVE-2005-1144/): Information disclosure in easyphpcalendar:easyphpcalendar (medium 5.0)
- [CVE-2005-1143](https://insights.sbomify.com/CVE-2005-1143/): Cross-site scripting in easyphpcalendar:easyphpcalendar (medium 4.3)
- [CVE-2005-1142](https://insights.sbomify.com/CVE-2005-1142/): Memory corruption in gocr:optical character recognition utility (high 7.5)
- [CVE-2005-1141](https://insights.sbomify.com/CVE-2005-1141/): Integer overflow in optical character recognition project:optical character recognition (critical 9.8)
- [CVE-2005-1140](https://insights.sbomify.com/CVE-2005-1140/): Cross-site scripting in mywebland:mybloggie (medium 4.3)
- [CVE-2005-1139](https://insights.sbomify.com/CVE-2005-1139/): Security feature bypass in opera:opera browser (high 7.5)
- [CVE-2005-1138](https://insights.sbomify.com/CVE-2005-1138/): Denial of service in kerio:kerio mailserver (medium 5.0)
- [CVE-2005-1137](https://insights.sbomify.com/CVE-2005-1137/): Information disclosure in alexander palmo:simple php blog (medium 5.0)
- [CVE-2005-1136](https://insights.sbomify.com/CVE-2005-1136/): Information disclosure in sphpblog:sphpblog (medium 5.0)
- [CVE-2005-1135](https://insights.sbomify.com/CVE-2005-1135/): Cross-site scripting in alexander palmo:simple php blog (medium 4.3)
- [CVE-2005-1134](https://insights.sbomify.com/CVE-2005-1134/): SQL injection in s9y:serendipity (high 7.5)
- [CVE-2005-1133](https://insights.sbomify.com/CVE-2005-1133/): Information disclosure in ibm:iseries as 400 (medium 5.0)
- [CVE-2005-1132](https://insights.sbomify.com/CVE-2005-1132/): Denial of service in lg electronics:lg mobile phone (medium 5.0)
- [CVE-2005-1131](https://insights.sbomify.com/CVE-2005-1131/): Other in symantec veritas:i3 focalpoint server (critical 10.0)
- [CVE-2005-1130](https://insights.sbomify.com/CVE-2005-1130/): Cross-site scripting in desert dog software:pinnacle cart (medium 4.3)
- [CVE-2005-1129](https://insights.sbomify.com/CVE-2005-1129/): eGroupWare 1.0.6 and earlier, when an e-mail is composed with an attachment but not sent, will send that attachment in the next e-mail, whic (low 2.1)
- [CVE-2005-1128](https://insights.sbomify.com/CVE-2005-1128/): SQL injection in virtual hosting control system:virtual hosting control system (high 7.5)
- [CVE-2005-1127](https://insights.sbomify.com/CVE-2005-1127/): Memory corruption in postgrey:postgrey (medium 5.0)
- [CVE-2005-1126](https://insights.sbomify.com/CVE-2005-1126/): Information disclosure in freebsd:freebsd (low 2.1)
- [CVE-2005-1125](https://insights.sbomify.com/CVE-2005-1125/): Race condition in avaya:libsafe (medium 5.1)
- [CVE-2005-1124](https://insights.sbomify.com/CVE-2005-1124/): Privilege escalation in sun:solaris (medium 4.6)
- [CVE-2005-1123](https://insights.sbomify.com/CVE-2005-1123/): Memory corruption in monkey-project:monkey (medium 5.0)
- [CVE-2005-1122](https://insights.sbomify.com/CVE-2005-1122/): Memory corruption in monkey-project:monkey (high 7.5)
- [CVE-2005-1121](https://insights.sbomify.com/CVE-2005-1121/): Memory corruption in gentoo:linux (medium 5.0)
- [CVE-2005-1120](https://insights.sbomify.com/CVE-2005-1120/): Cross-site scripting in ilohamail:ilohamail (medium 4.3)
- [CVE-2005-1119](https://insights.sbomify.com/CVE-2005-1119/): Race condition in todd miller:sudo (low 2.1)
- [CVE-2005-1118](https://insights.sbomify.com/CVE-2005-1118/): Cross-site scripting in rsa:authentication agent for web (medium 4.3)
- [CVE-2005-1117](https://insights.sbomify.com/CVE-2005-1117/): Code injection in all4www:all4www-homepagecreator (high 7.5)
- [CVE-2005-1116](https://insights.sbomify.com/CVE-2005-1116/): Cross-site scripting in phpbb group:phpbb (medium 4.3)
- [CVE-2005-1115](https://insights.sbomify.com/CVE-2005-1115/): Cross-site scripting in phpbb group:phpbb (medium 4.3)
- [CVE-2005-1114](https://insights.sbomify.com/CVE-2005-1114/): SQL injection in phpbb group:phpbb (high 7.5)
- [CVE-2005-1113](https://insights.sbomify.com/CVE-2005-1113/): Cross-site scripting in phpbb group:phpbb plus (medium 4.3)
- [CVE-2005-1112](https://insights.sbomify.com/CVE-2005-1112/): Information disclosure in ibm:websphere application server (medium 5.0)
- [CVE-2005-1111](https://insights.sbomify.com/CVE-2005-1111/): Race condition in canonical:ubuntu linux (medium 4.7)
- [CVE-2005-1110](https://insights.sbomify.com/CVE-2005-1110/): Memory corruption in sumus:sumus (high 7.5)
- [CVE-2005-1109](https://insights.sbomify.com/CVE-2005-1109/): Memory corruption in junkbuster:internet junkbuster (high 7.5)
- [CVE-2005-1108](https://insights.sbomify.com/CVE-2005-1108/): Other in junkbuster:internet junkbuster (medium 5.0)
- [CVE-2005-1107](https://insights.sbomify.com/CVE-2005-1107/): Misconfiguration in mcafee:internet security suite (high 7.2)
- [CVE-2005-1106](https://insights.sbomify.com/CVE-2005-1106/): Integer overflow in apple:quicktime pictureviewer (medium 5.0)
- [CVE-2005-1105](https://insights.sbomify.com/CVE-2005-1105/): Path traversal in sun:javamail (medium 5.0)
- [CVE-2005-1104](https://insights.sbomify.com/CVE-2005-1104/): Cross-site scripting in centra:centra (medium 4.3)
- [CVE-2005-1103](https://insights.sbomify.com/CVE-2005-1103/): Missing authorization in sygate technologies:security agent (medium 4.6)
- [CVE-2005-1102](https://insights.sbomify.com/CVE-2005-1102/): Cross-site scripting in wordpress:wordpress (medium 6.8)
- [CVE-2005-1101](https://insights.sbomify.com/CVE-2005-1101/): Memory corruption in ibm:lotus domino server (high 7.5)
- [CVE-2005-1100](https://insights.sbomify.com/CVE-2005-1100/): Memory corruption in salim gasmi:gld (high 7.5)
- [CVE-2005-1099](https://insights.sbomify.com/CVE-2005-1099/): Memory corruption in salim gasmi:gld (critical 10.0)
- [CVE-2005-1098](https://insights.sbomify.com/CVE-2005-1098/): Information disclosure in runtime software:getdataback for ntfs (low 2.1)
- [CVE-2005-1097](https://insights.sbomify.com/CVE-2005-1097/): Information disclosure in rebrand:p2p share spy (medium 4.6)
- [CVE-2005-1096](https://insights.sbomify.com/CVE-2005-1096/): SQL injection in ocean12 technologies:membership manager pro (high 7.5)
- [CVE-2005-1095](https://insights.sbomify.com/CVE-2005-1095/): Cross-site scripting in ocean12 technologies:membership manager pro (medium 4.3)
- [CVE-2005-1094](https://insights.sbomify.com/CVE-2005-1094/): FTP Now 2.6.14 stores usernames and passwords in plaintext in sites.xml, which is world-readable, which allows local users to gain privileges. (medium 4.6)
- [CVE-2005-1093](https://insights.sbomify.com/CVE-2005-1093/): Memory corruption in popup plus plugin:popup plus plugin for miranda im (high 7.5)
- [CVE-2005-1092](https://insights.sbomify.com/CVE-2005-1092/): Information disclosure in light speed technology:deluxeftp (high 7.2)
- [CVE-2005-1091](https://insights.sbomify.com/CVE-2005-1091/): Maxthon 1.2.0 and 1.2.1 allows remote attackers to bypass the security ID and use restricted plugin API functions via script that includes t (high 7.5)
- [CVE-2005-1090](https://insights.sbomify.com/CVE-2005-1090/): Path traversal in maxthon:maxthon (medium 6.4)
- [CVE-2005-1089](https://insights.sbomify.com/CVE-2005-1089/): Other in dc\+\+:dc\+\+ (medium 5.0)
- [CVE-2005-1088](https://insights.sbomify.com/CVE-2005-1088/): Privilege escalation in dameware development:mini remote control (high 7.2)
- [CVE-2005-1087](https://insights.sbomify.com/CVE-2005-1087/): Other in an:an-httpd (medium 6.4)
- [CVE-2005-1086](https://insights.sbomify.com/CVE-2005-1086/): Memory corruption in an:an-httpd (medium 6.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2005/page/36/