# Vulnerabilities published in 2005


- [CVE-2005-1085](https://insights.sbomify.com/CVE-2005-1085/): Cross-site scripting (XSS) vulnerability in the control panel in aeDating 3.2 allows remote attackers to inject arbitrary web script or HTML. (medium 4.3)
- [CVE-2005-1084](https://insights.sbomify.com/CVE-2005-1084/): SQL injection in aewebworks:aedating (high 7.5)
- [CVE-2005-1083](https://insights.sbomify.com/CVE-2005-1083/): Path traversal in aewebworks:aedating (medium 5.0)
- [CVE-2005-1082](https://insights.sbomify.com/CVE-2005-1082/): SQL injection in azerbaijan development group:azdgdating (high 7.5)
- [CVE-2005-1081](https://insights.sbomify.com/CVE-2005-1081/): Cross-site scripting in azerbaijan development group:azdgdating (medium 4.3)
- [CVE-2005-1080](https://insights.sbomify.com/CVE-2005-1080/): Path traversal in sun:sdk (medium 5.0)
- [CVE-2005-1079](https://insights.sbomify.com/CVE-2005-1079/): SQL injection vulnerability in index.php for zOOm Media Gallery 2.1.2 allows remote attackers to execute arbitrary SQL commands via the catid parameter. (high 7.5)
- [CVE-2005-1078](https://insights.sbomify.com/CVE-2005-1078/): Hardcoded credentials in xampp:apache distribution (high 7.5)
- [CVE-2005-1077](https://insights.sbomify.com/CVE-2005-1077/): Cross-site scripting in xampp:apache distribution (medium 4.3)
- [CVE-2005-1076](https://insights.sbomify.com/CVE-2005-1076/): Cross-site scripting in webct:webct (medium 4.3)
- [CVE-2005-1075](https://insights.sbomify.com/CVE-2005-1075/): Cross-site scripting in radscripts:radbids (medium 4.3)
- [CVE-2005-1074](https://insights.sbomify.com/CVE-2005-1074/): SQL injection in radscripts:radbids (high 7.5)
- [CVE-2005-1073](https://insights.sbomify.com/CVE-2005-1073/): Path traversal in radscripts:radbids (medium 5.0)
- [CVE-2005-1072](https://insights.sbomify.com/CVE-2005-1072/): Cross-site scripting in punbb:punbb (medium 4.3)
- [CVE-2005-1071](https://insights.sbomify.com/CVE-2005-1071/): SQL injection vulnerability in banner.inc.php in JPortal Web Portal 2.3.1 allows remote attackers to execute arbitrary SQL commands via the haslo parameter. (high 7.5)
- [CVE-2005-1070](https://insights.sbomify.com/CVE-2005-1070/): SQL injection in invision power services:invision board (high 7.5)
- [CVE-2005-1069](https://insights.sbomify.com/CVE-2005-1069/): Unknown vulnerability in sCssBoard 1.11 and earlier has unknown impact, related to "an exploit on the Profile page." (critical 10.0)
- [CVE-2005-1068](https://insights.sbomify.com/CVE-2005-1068/): Cross-site scripting (XSS) vulnerability in sCssBoard 1.11 and earlier allows remote attackers to execute arbitrary Javascript via [url] tags. (medium 4.3)
- [CVE-2005-1067](https://insights.sbomify.com/CVE-2005-1067/): Auth bypass in access user class:access user class (high 7.5)
- [CVE-2005-1066](https://insights.sbomify.com/CVE-2005-1066/): Race condition in university of washington:pine (low 1.2)
- [CVE-2005-1065](https://insights.sbomify.com/CVE-2005-1065/): Other in novell:linux desktop (low 2.1)
- [CVE-2005-1064](https://insights.sbomify.com/CVE-2005-1064/): Privilege escalation in rsnapshot:filesystem snapshot utility (medium 4.6)
- [CVE-2005-1063](https://insights.sbomify.com/CVE-2005-1063/): Denial of service in kerio:kerio mailserver (medium 5.0)
- [CVE-2005-1062](https://insights.sbomify.com/CVE-2005-1062/): Weak cryptography in kerio:kerio mailserver (high 7.5)
- [CVE-2005-1061](https://insights.sbomify.com/CVE-2005-1061/): Denial of service in logwatch:logwatch (medium 5.0)
- [CVE-2005-1060](https://insights.sbomify.com/CVE-2005-1060/): Denial of service in novell:netware (medium 5.0)
- [CVE-2005-1059](https://insights.sbomify.com/CVE-2005-1059/): Auth bypass in linksys:wet11 (low 2.1)
- [CVE-2005-1058](https://insights.sbomify.com/CVE-2005-1058/): Auth bypass in cisco:ios (high 7.5)
- [CVE-2005-1057](https://insights.sbomify.com/CVE-2005-1057/): Auth bypass in cisco:ios (high 7.5)
- [CVE-2005-1056](https://insights.sbomify.com/CVE-2005-1056/): Denial of service in hp:openview network node manager (medium 5.0)
- [CVE-2005-1055](https://insights.sbomify.com/CVE-2005-1055/): Information disclosure in towerblog:towerblog (high 7.5)
- [CVE-2005-1054](https://insights.sbomify.com/CVE-2005-1054/): Code injection in moderngigabyte:modernbill (high 7.5)
- [CVE-2005-1053](https://insights.sbomify.com/CVE-2005-1053/): Cross-site scripting in moderngigabyte:modernbill (medium 4.3)
- [CVE-2005-1052](https://insights.sbomify.com/CVE-2005-1052/): Other in microsoft:outlook (medium 5.0)
- [CVE-2005-1051](https://insights.sbomify.com/CVE-2005-1051/): SQL injection in punbb:punbb (medium 6.5)
- [CVE-2005-1050](https://insights.sbomify.com/CVE-2005-1050/): Information disclosure in postnuke software foundation:postnuke (medium 5.0)
- [CVE-2005-1049](https://insights.sbomify.com/CVE-2005-1049/): Cross-site scripting in postnuke software foundation:postnuke (low 2.6)
- [CVE-2005-1048](https://insights.sbomify.com/CVE-2005-1048/): SQL injection in postnuke software foundation:postnuke (high 7.5)
- [CVE-2005-1047](https://insights.sbomify.com/CVE-2005-1047/): File upload in phpbb group:phpbb (high 7.5)
- [CVE-2005-1046](https://insights.sbomify.com/CVE-2005-1046/): Memory corruption in kde:kde (high 7.5)
- [CVE-2005-1045](https://insights.sbomify.com/CVE-2005-1045/): Command injection in centrinity:centrinity firstclass desktop client (high 7.5)
- [CVE-2005-1043](https://insights.sbomify.com/CVE-2005-1043/): Denial of service in apple:mac os x (medium 5.0)
- [CVE-2005-1042](https://insights.sbomify.com/CVE-2005-1042/): Integer overflow in php:php (high 7.5)
- [CVE-2005-1041](https://insights.sbomify.com/CVE-2005-1041/): Denial of service in linux:linux kernel (low 2.1)
- [CVE-2005-1040](https://insights.sbomify.com/CVE-2005-1040/): Command injection in novell:linux desktop (high 7.2)
- [CVE-2005-1039](https://insights.sbomify.com/CVE-2005-1039/): Race condition in gnu:coreutils (low 3.7)
- [CVE-2005-1038](https://insights.sbomify.com/CVE-2005-1038/): Information disclosure in paul vixie:vixie cron (low 2.1)
- [CVE-2005-1037](https://insights.sbomify.com/CVE-2005-1037/): Privilege escalation in ibm:aix (critical 10.0)
- [CVE-2005-1036](https://insights.sbomify.com/CVE-2005-1036/): Security feature bypass in freebsd:freebsd (high 7.8)
- [CVE-2005-1035](https://insights.sbomify.com/CVE-2005-1035/): Memory corruption in pavuk:pavuk (high 7.5)
- [CVE-2005-1034](https://insights.sbomify.com/CVE-2005-1034/): Denial of service in netwin:surgeftp (medium 5.0)
- [CVE-2005-1033](https://insights.sbomify.com/CVE-2005-1033/): Information disclosure in devellion:cubecart (medium 5.0)
- [CVE-2005-1031](https://insights.sbomify.com/CVE-2005-1031/): File upload in e-xoops:e-xoops (medium 5.0)
- [CVE-2005-1030](https://insights.sbomify.com/CVE-2005-1030/): Cross-site scripting in active web softwares:active auction house (medium 4.3)
- [CVE-2005-1029](https://insights.sbomify.com/CVE-2005-1029/): SQL injection in active web softwares:active auction house (high 7.5)
- [CVE-2005-1028](https://insights.sbomify.com/CVE-2005-1028/): Information disclosure in phpnuke:php-nuke (medium 5.0)
- [CVE-2005-1027](https://insights.sbomify.com/CVE-2005-1027/): Cross-site scripting in francisco burzi:php-nuke (medium 4.3)
- [CVE-2005-1026](https://insights.sbomify.com/CVE-2005-1026/): SQL injection in dlman pro:dlman pro (high 7.5)
- [CVE-2005-1025](https://insights.sbomify.com/CVE-2005-1025/): Path traversal in ibm:iseries as 400 (medium 5.0)
- [CVE-2005-1024](https://insights.sbomify.com/CVE-2005-1024/): Information disclosure in francisco burzi:php-nuke (medium 5.0)
- [CVE-2005-1023](https://insights.sbomify.com/CVE-2005-1023/): Cross-site scripting in francisco burzi:php-nuke (medium 4.3)
- [CVE-2005-1022](https://insights.sbomify.com/CVE-2005-1022/): Information disclosure in macromedia:coldfusion (medium 5.0)
- [CVE-2005-1021](https://insights.sbomify.com/CVE-2005-1021/): Denial of service in cisco:ios (high 7.1)
- [CVE-2005-1020](https://insights.sbomify.com/CVE-2005-1020/): Denial of service in cisco:ios (high 7.1)
- [CVE-2005-1019](https://insights.sbomify.com/CVE-2005-1019/): Memory corruption in aeon:aeon (high 7.2)
- [CVE-2005-1018](https://insights.sbomify.com/CVE-2005-1018/): Memory corruption in ca:brightstor arcserve backup (high 7.5)
- [CVE-2005-1017](https://insights.sbomify.com/CVE-2005-1017/): SQL injection in maxwebportal:maxwebportal (high 7.5)
- [CVE-2005-1016](https://insights.sbomify.com/CVE-2005-1016/): Cross-site scripting in maxwebportal:maxwebportal (medium 4.3)
- [CVE-2005-1015](https://insights.sbomify.com/CVE-2005-1015/): Memory corruption in mailenable:imapd (critical 10.0)
- [CVE-2005-1014](https://insights.sbomify.com/CVE-2005-1014/): Memory corruption in mailenable:mailenable enterprise (high 7.5)
- [CVE-2005-1013](https://insights.sbomify.com/CVE-2005-1013/): Denial of service in mailenable:mailenable enterprise (medium 5.0)
- [CVE-2005-1012](https://insights.sbomify.com/CVE-2005-1012/): Cross-site scripting in iatek:siteenable (medium 4.3)
- [CVE-2005-1011](https://insights.sbomify.com/CVE-2005-1011/): SQL injection in iatek:siteenable (high 7.5)
- [CVE-2005-1010](https://insights.sbomify.com/CVE-2005-1010/): Cross-site scripting in comersus open technologies:comersus cart (medium 4.3)
- [CVE-2005-1009](https://insights.sbomify.com/CVE-2005-1009/): Memory corruption in bakbone:netvault (critical 10.0)
- [CVE-2005-1008](https://insights.sbomify.com/CVE-2005-1008/): Cross-site scripting in asp-dev:xm forum (medium 4.3)
- [CVE-2005-1007](https://insights.sbomify.com/CVE-2005-1007/): Denial of service in stalker:communigate pro (medium 5.0)
- [CVE-2005-1006](https://insights.sbomify.com/CVE-2005-1006/): Cross-site scripting in sonicwall:soho firmware (medium 4.3)
- [CVE-2005-1005](https://insights.sbomify.com/CVE-2005-1005/): Auth bypass in profitcode:payprocart (high 7.5)
- [CVE-2005-1004](https://insights.sbomify.com/CVE-2005-1004/): Cross-site scripting in profitcode:payprocart (medium 4.3)
- [CVE-2005-1003](https://insights.sbomify.com/CVE-2005-1003/): Path traversal in profitcode:payprocart (high 7.5)
- [CVE-2005-1002](https://insights.sbomify.com/CVE-2005-1002/): Path traversal in logics software:log-ft (medium 5.0)
- [CVE-2005-1001](https://insights.sbomify.com/CVE-2005-1001/): Information disclosure in francisco burzi:php-nuke (medium 5.0)
- [CVE-2005-10004](https://insights.sbomify.com/CVE-2005-10004/): Cacti graph_view.php RCE via graph_start Parameter Injection (high 8.7)
- [CVE-2005-10003](https://insights.sbomify.com/CVE-2005-10003/): mikexstudios Xcomic os command injection (medium 6.3)
- [CVE-2005-10002](https://insights.sbomify.com/CVE-2005-10002/): almosteffortless secure-files Plugin secure-files.php sf_downloads path traversal (medium 5.5)
- [CVE-2005-10001](https://insights.sbomify.com/CVE-2005-10001/): Netegrity SiteMinder Login smpwservicescgi.exe redirect (medium 5.4)
- [CVE-2005-1000](https://insights.sbomify.com/CVE-2005-1000/): Cross-site scripting in francisco burzi:php-nuke (medium 4.3)
- [CVE-2005-0999](https://insights.sbomify.com/CVE-2005-0999/): SQL injection in francisco burzi:php-nuke (high 7.5)
- [CVE-2005-0998](https://insights.sbomify.com/CVE-2005-0998/): Information disclosure in francisco burzi:php-nuke (medium 5.0)
- [CVE-2005-0997](https://insights.sbomify.com/CVE-2005-0997/): SQL injection in francisco burzi:php-nuke (high 7.5)
- [CVE-2005-0996](https://insights.sbomify.com/CVE-2005-0996/): SQL injection in francisco burzi:php-nuke (medium 5.0)
- [CVE-2005-0995](https://insights.sbomify.com/CVE-2005-0995/): Cross-site scripting in early impact:productcart (medium 4.3)
- [CVE-2005-0994](https://insights.sbomify.com/CVE-2005-0994/): SQL injection in early impact:productcart (high 7.5)
- [CVE-2005-0993](https://insights.sbomify.com/CVE-2005-0993/): Memory corruption in sco:openserver (medium 4.6)
- [CVE-2005-0992](https://insights.sbomify.com/CVE-2005-0992/): Cross-site scripting in phpmyadmin:phpmyadmin (medium 4.3)
- [CVE-2005-0991](https://insights.sbomify.com/CVE-2005-0991/): RC.BOOT in IBM AIX 5.1, 5.2, and 5.3 does not "use a secure location for temporary files," which allows local users to have an unknown impac (low 2.1)
- [CVE-2005-0990](https://insights.sbomify.com/CVE-2005-0990/): Race condition in gnu:sharutils (low 2.1)
- [CVE-2005-0989](https://insights.sbomify.com/CVE-2005-0989/): Information disclosure in mozilla:firefox (medium 5.0)
- [CVE-2005-0988](https://insights.sbomify.com/CVE-2005-0988/): Race condition in freebsd:freebsd (low 3.7)

---
From sbomify Insights: https://insights.sbomify.com/years/2005/page/37/