Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: May 2005

93 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2005-0033
    23Monitor

    Buffer overflow in the code for recursion and glue fetching in BIND 8.4.4 and 8.4.5 allows remote attackers to cause a denial of service (cr

    MediumCVSS 5.0No exploitEPSS 11%

    isc · bindMay 2, 2005

  • CVE-2005-0043
    51Plan

    Buffer overflow in Apple iTunes 4.7 allows remote attackers to execute arbitrary code via a long URL in (1) .m3u or (2) .pls playlist files.

    HighCVSS 7.5WeaponizedEPSS 69%

    apple · itunesMay 2, 2005

  • CVE-2005-0044
    40Plan

    The OLE component in Windows 98, 2000, XP, and Server 2003, and Exchange Server 5.0 through 2003, does not properly validate the lengths of

    HighCVSS 7.5No exploitEPSS 33%

    microsoft · exchange serverMay 2, 2005

  • CVE-2005-0045
    51Plan

    The Server Message Block (SMB) implementation for Windows NT 4.0, 2000, XP, and Server 2003 does not properly validate certain SMB packets,

    HighCVSS 7.5Proof of conceptEPSS 70%

    microsoft · windows 2000May 2, 2005

  • CVE-2005-0048
    42Plan

    Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Server 2003, and older operating systems allows remote attackers to cause a denial o

    HighCVSS 7.5Proof of conceptEPSS 38%

    microsoft · windows 2000May 2, 2005

  • CVE-2005-0049
    23Monitor

    Windows SharePoint Services and SharePoint Team Services for Windows Server 2003 does not properly validate an HTTP redirection query, which

    MediumCVSS 4.3No exploitEPSS 20%

    microsoft · sharepoint portal serverMay 2, 2005

  • CVE-2005-0050
    54Plan

    The License Logging service for Windows NT Server, Windows 2000 Server, and Windows Server 2003 does not properly validate the length of mes

    CriticalCVSS 10.0No exploitEPSS 46%

    microsoft · windows 2000May 2, 2005

  • CVE-2005-0051
    44Plan

    The Server service (srvsvc.dll) in Windows XP SP1 and SP2 allows remote attackers to obtain sensitive information (users who are accessing r

    HighCVSS 7.5No exploitEPSS 46%

    microsoft · windows xpMay 2, 2005

  • CVE-2005-0053
    48Plan

    Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via drag and drop events, aka the "Drag-and-Drop Vulner

    HighCVSS 7.5Proof of conceptEPSS 59%

    microsoft · ieMay 2, 2005

  • CVE-2005-0054
    27Monitor

    Internet Explorer 5.01, 5.5, and 6 allows remote attackers to spoof a less restrictive security zone and execute arbitrary code via an HTML

    MediumCVSS 5.1No exploitEPSS 24%

    microsoft · ieMay 2, 2005

  • CVE-2005-0055
    41Plan

    Internet Explorer 5.01, 5.5, and 6 does not properly validate buffers when handling certain DHTML methods including the createControlRange J

    HighCVSS 7.5No exploitEPSS 36%

    microsoft · ieMay 2, 2005

  • CVE-2005-0056
    28Monitor

    Internet Explorer 5.01, 5.5, and 6 does not properly validate certain URLs in Channel Definition Format (CDF) files, which allows remote att

    MediumCVSS 5.1No exploitEPSS 28%

    microsoft · ieMay 2, 2005

  • CVE-2005-0057
    42Plan

    The Hyperlink Object Library for Windows 98, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a crafted link

    HighCVSS 7.5No exploitEPSS 41%

    microsoft · windows 2000May 2, 2005

  • CVE-2005-0059
    62This week

    Buffer overflow in the Message Queuing component of Microsoft Windows 2000 and Windows XP SP1 allows remote attackers to execute arbitrary c

    CriticalCVSS 10.0WeaponizedEPSS 73%

    microsoft · windows 2000May 2, 2005

  • CVE-2005-0063
    44Plan

    The document processing application used by the Windows Shell in Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote a

    HighCVSS 7.5Proof of conceptEPSS 47%

    microsoft · windows 2000May 2, 2005

  • CVE-2005-0173
    40Plan

    squid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to bypass username-based Access Control Lists (ACLs) via a userna

    HighCVSS 7.5No exploitEPSS 31%

    squid · squidMay 2, 2005

  • CVE-2005-0199
    45Plan

    Integer underflow in the Lists_MakeMask() function in lists.c in ngIRCd before 0.8.2 allows remote attackers to cause a denial of service (a

    CriticalCVSS 9.8Proof of conceptEPSS 18%

    barton · ngircdMay 2, 2005

  • CVE-2005-0211
    37Monitor

    Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and possibly execute arbitrar

    HighCVSS 7.5No exploitEPSS 22%

    squid-cache · squidMay 2, 2005

  • CVE-2005-0241
    41Plan

    The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly set the debug context when it is handling

    MediumCVSS 5.0No exploitEPSS 69%

    squid · squidMay 2, 2005

  • CVE-2005-0260
    61This week

    Stack-based buffer overflow in the Discovery Service for BrightStor ARCserve Backup 11.1 and earlier allows remote attackers to execute arbi

    CriticalCVSS 10.0WeaponizedEPSS 69%

    broadcom · brightstor arcserve backupMay 2, 2005

  • CVE-2005-0277
    40Plan

    Buffer overflow in the FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service (application crash)

    MediumCVSS 5.0WeaponizedEPSS 61%

    3com · 3cdaemonMay 2, 2005

  • CVE-2005-0353
    61This week

    Buffer overflow in the Sentinel LM (Lservnt) service in the Sentinel License Manager 7.2.0.2 allows remote attackers to execute arbitrary co

    CriticalCVSS 10.0WeaponizedEPSS 71%

    safenet · sentinel license managerMay 2, 2005

  • CVE-2005-0399
    25Monitor

    Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other ap

    MediumCVSS 5.1No exploitEPSS 15%

    mozilla · firefoxMay 2, 2005

  • CVE-2005-0439
    33Monitor

    Buffer overflow in the decode_post function in ELOG before 2.5.7 allows remote attackers to execute arbitrary code via attachments with long

    HighCVSS 7.5Proof of conceptEPSS 10%

    stefan ritt · elog web logbookMay 2, 2005

  • CVE-2005-0446
    32Monitor

    Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via certain DNS responses regarding (1) Fully Qua

    MediumCVSS 5.0No exploitEPSS 41%

    squid · squidMay 2, 2005

  • CVE-2005-0455
    40Plan

    Stack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in smlparse.cpp for RealNetworks RealPlayer 10.5 (6.0.12.1056

    MediumCVSS 5.1WeaponizedEPSS 53%

    realnetworks · realone playerMay 2, 2005

  • CVE-2005-0468
    38Monitor

    Heap-based buffer overflow in the env_opt_add function in telnet.c for various BSD-based Telnet clients allows remote attackers to execute a

    HighCVSS 7.5Proof of conceptEPSS 27%

    ncsa · telnetMay 2, 2005

  • CVE-2005-0491
    59Plan

    Stack-based buffer overflow in Knox Arkeia Server Backup 5.3.x allows remote attackers to execute arbitrary code via a long type 77 request.

    CriticalCVSS 10.0WeaponizedEPSS 64%

    knox software · arkeia server backupMay 2, 2005

  • CVE-2005-0500
    23Monitor

    Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to spoof the domain name of a URL in a titlebar for a script-initiated popup

    MediumCVSS 5.0No exploitEPSS 10%

    microsoft · ieMay 2, 2005

  • CVE-2005-0551
    46Plan

    Stack-based buffer overflow in WINSRV.DLL in the Client Server Runtime System (CSRSS) process of Microsoft Windows 2000, Windows XP SP1 and

    CriticalCVSS 10.0Proof of conceptEPSS 20%

    microsoft · windows 2000May 2, 2005

  • CVE-2005-0553
    35Monitor

    Race condition in the memory management routines in the DHTML object processor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote

    MediumCVSS 5.1Proof of conceptEPSS 50%

    microsoft · ieMay 2, 2005

  • CVE-2005-0554
    47Plan

    Buffer overflow in the URL processor of Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (c

    HighCVSS 7.5Proof of conceptEPSS 57%

    microsoft · internet explorerMay 2, 2005

  • CVE-2005-0558
    25Monitor

    Buffer overflow in Microsoft Word 2000, Word 2002, and Word 2003 allows remote attackers to execute arbitrary code via a crafted document.

    MediumCVSS 5.1No exploitEPSS 15%

    microsoft · wordMay 2, 2005

  • CVE-2005-0560
    51Plan

    Heap-based buffer overflow in the SvrAppendReceivedChunk function in xlsasink.dll in the SMTP service of Exchange Server 2000 and 2003 allow

    HighCVSS 7.5Proof of conceptEPSS 69%

    microsoft · exchange serverMay 2, 2005

  • CVE-2005-0581
    40Plan

    Multiple buffer overflows in Computer Associates (CA) License Client and Server 0.1.0.15 allow remote attackers to execute arbitrary code vi

    MediumCVSS 4.6WeaponizedEPSS 46%

    broadcom · license softwareMay 2, 2005

  • CVE-2005-0582
    51Plan

    Buffer overflow in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to execute arbitrary code via a long filename in

    CriticalCVSS 10.0Proof of conceptEPSS 37%

    broadcom · license softwareMay 2, 2005

  • CVE-2005-0595
    48Plan

    Buffer overflow in ext.dll in BadBlue 2.55 allows remote attackers to execute arbitrary code via a long mfcisapicommand parameter.

    HighCVSS 7.5WeaponizedEPSS 60%

    working resources inc. · badblueMay 2, 2005

  • CVE-2005-0634
    33Monitor

    Buffer overflow in Golden FTP Server 1.92 allows remote attackers to execute arbitrary code via a long USER command.

    HighCVSS 7.5Proof of conceptEPSS 10%

    kmint21 software · golden ftp serverMay 2, 2005

  • CVE-2005-0643
    33Monitor

    Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4357 allows remote attackers to execute arbitrary code via crafted LHA fi

    HighCVSS 7.5Proof of conceptEPSS 10%

    mcafee · antivirus engineMay 2, 2005

  • CVE-2005-0709
    24Monitor

    MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary c

    MediumCVSS 4.6Proof of conceptEPSS 18%

    mysql · mysqlMay 2, 2005

  • CVE-2005-0710
    22Monitor

    MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to bypass library path

    MediumCVSS 4.6Proof of conceptEPSS 12%

    mysql · mysqlMay 2, 2005

  • CVE-2005-0768
    58Plan

    Buffer overflow in the administration web server for GoodTech Telnet Server 4.0 and 5.0, and possibly all versions before 5.0.7, allows remo

    CriticalCVSS 10.0WeaponizedEPSS 59%

    goodtech systems · goodtech telnet serverMay 2, 2005

  • CVE-2005-0803
    40Plan

    The GetEnhMetaFilePaletteEntries API in GDI32.DLL in Windows 2000 allows remote attackers to cause a denial of service (application crash) v

    MediumCVSS 5.0Proof of conceptEPSS 67%

    microsoft · windows 2000May 2, 2005

  • CVE-2005-0808
    27Monitor

    Apache Tomcat before 5.x allows remote attackers to cause a denial of service (application crash) via a crafted AJP12 packet to TCP port 800

    MediumCVSS 5.0No exploitEPSS 23%

    apache · tomcatMay 2, 2005

  • CVE-2005-0815
    29Monitor

    Multiple "range checking flaws" in the ISO9660 filesystem handler in Linux 2.6.11 and earlier may allow attackers to cause a denial of servi

    MediumCVSS 6.4Proof of conceptEPSS 13%

    linux · linux kernelMay 2, 2005

  • CVE-2005-0859
    33Monitor

    PHP remote file inclusion vulnerability in CzarNews 1.13b allows remote attackers to execute arbitrary PHP code via the tpath parameter to (

    HighCVSS 7.5Proof of conceptEPSS 11%

    czaries network · czarnewsMay 2, 2005

  • CVE-2005-0862
    33Monitor

    Multiple PHP remote file inclusion vulnerabilities in PHPOpenChat 3.0.1 and earlier allow remote attackers to execute arbitrary PHP code via

    HighCVSS 7.5Proof of conceptEPSS 10%

    phpopenchat · phpopenchatMay 2, 2005

  • CVE-2005-0873
    20Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in test.jsp in Oracle Reports Server 10g (9.0.4.3.3) allow remote attackers to inject ar

    MediumCVSS 4.3Proof of conceptEPSS 11%

    oracle · 10g reports serverMay 2, 2005

  • CVE-2005-0944
    40Plan

    Unknown vulnerability in Microsoft Jet DB engine (msjet40.dll) 4.00.8618.0, related to insufficient data validation, allows remote attackers

    HighCVSS 7.5Proof of conceptEPSS 34%

    microsoft · jetMay 2, 2005

  • CVE-2005-0954
    24Monitor

    Windows Explorer and Internet Explorer in Windows 2000 SP1 allows remote attackers to cause a denial of service (CPU consumption) via a malf

    MediumCVSS 5.0No exploitEPSS 14%

    microsoft · internet explorerMay 2, 2005

  • CVE-2005-0989
    23Monitor

    The find_replen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netscape 7.2 allows remot

    MediumCVSS 5.0Proof of conceptEPSS 10%

    mozilla · firefoxMay 2, 2005

  • CVE-2005-1009
    57Plan

    Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow (1) remote attackers to execute arbitrary code via a modified computer name

    CriticalCVSS 10.0WeaponizedEPSS 57%

    bakbone · netvaultMay 2, 2005

  • CVE-2005-1015
    45Plan

    Buffer overflow in MailEnable Imapd (MEIMAP.exe) allows remote attackers to execute arbitrary code via a long LOGIN command.

    CriticalCVSS 10.0No exploitEPSS 16%

    mailenable · imapdMay 2, 2005

  • CVE-2005-1018
    46Plan

    Buffer overflow in the UniversalAgent for Computer Associates (CA) BrightStor ARCserve Backup allows remote authenticated users to cause a d

    HighCVSS 7.5WeaponizedEPSS 51%

    ca · brightstor arcserve backupMay 2, 2005

  • CVE-2005-1100
    33Monitor

    Format string vulnerability in the ErrorLog function in cnf.c in Greylisting daemon (GLD) 1.3 and 1.4 allows remote attackers to execute arb

    HighCVSS 7.5Proof of conceptEPSS 10%

    salim gasmi · gldMay 2, 2005

  • CVE-2005-1163
    29Monitor

    Multiple buffer overflows in Yager 5.24 and earlier allow remote attackers to execute arbitrary code via (1) a crafted nickname or (2) a pac

    MediumCVSS 6.4Proof of conceptEPSS 12%

    yager development · yager gameMay 2, 2005

  • CVE-2005-1184
    30Monitor

    The TCP/IP stack in multiple operating systems allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with

    MediumCVSS 5.0Proof of conceptEPSS 32%

    microsoft · windows 2000May 2, 2005

  • CVE-2005-1191
    25Monitor

    The Web View DLL (webvw.dll), as used in Windows Explorer on Windows 2000 systems, does not properly filter an apostrophe ("'") in the autho

    MediumCVSS 5.0Proof of conceptEPSS 17%

    microsoft · windows 2000May 2, 2005

  • CVE-2005-1278
    23Monitor

    The isis_print function, as called by isoclns_print, in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infi

    MediumCVSS 5.0Proof of conceptEPSS 10%

    lbl · tcpdumpMay 2, 2005

  • CVE-2005-1279
    26Monitor

    tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted (1) BGP packet, which is not pr

    MediumCVSS 5.0Proof of conceptEPSS 18%

    lbl · tcpdumpMay 2, 2005

  • CVE-2005-1280
    23Monitor

    The rsvp_print function in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted RSVP

    MediumCVSS 5.0Proof of conceptEPSS 10%

    lbl · tcpdumpMay 2, 2005

  • CVE-2005-1323
    49Plan

    Buffer overflow in NetFtpd for NetTerm 5.1.1 and earlier allows remote attackers to execute arbitrary code via a long USER command.

    HighCVSS 7.5WeaponizedEPSS 63%

    intersoft · nettermMay 2, 2005

  • CVE-2005-1344
    39Monitor

    Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument.

    HighCVSS 7.5Proof of conceptEPSS 29%

    apache · http serverMay 2, 2005

  • CVE-2005-1348
    52Plan

    Buffer overflow in HTTPMail in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to execute a

    HighCVSS 7.5WeaponizedEPSS 72%

    mailenable · mailenable enterpriseMay 2, 2005

  • CVE-2005-1349
    34Monitor

    Buffer overflow in Convert-UUlib (Convert::UUlib) before 1.051 allows remote attackers to execute arbitrary code via a malformed parameter t

    HighCVSS 7.5Proof of conceptEPSS 12%

    perl · convert uulibMay 2, 2005

  • CVE-2005-1381
    33Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Oracle Webcache 9i allow remote attackers to inject arbitrary web script or HTML via

    MediumCVSS 6.8Proof of conceptEPSS 20%

    oracle · application server web cacheMay 3, 2005

  • CVE-2005-1383
    39Monitor

    The OHS component 1.0.2 through 10.x, when UseWebcacheIP is disabled, in Oracle Application Server allows remote attackers to bypass HTTP Se

    HighCVSS 7.5Proof of conceptEPSS 30%

    oracle · application serverMay 3, 2005

  • CVE-2005-1415
    58Plan

    Buffer overflow in GlobalSCAPE Secure FTP Server 3.0.2 allows remote authenticated users to execute arbitrary code via a long FTP command.

    CriticalCVSS 10.0WeaponizedEPSS 60%

    globalscape · secure ftp serverMay 3, 2005

  • CVE-2005-1825
    48Plan

    Multiple stack-based buffer overflows in the nvd_exec function in HP Radia Notify Daemon 3.1.2.0 (formerly by Novadigm), and other versions

    HighCVSS 7.5No exploitEPSS 61%

    hp · radia clientMay 3, 2005

  • CVE-2005-1476
    25Monitor

    Firefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using an IFRAME and causing the browser to navigat

    MediumCVSS 5.1Proof of conceptEPSS 16%

    mozilla · firefoxMay 9, 2005

  • CVE-2005-1477
    25Monitor

    The install function in Firefox 1.0.3 allows remote web sites on the browser's whitelist, such as update.mozilla.org or addon.mozilla.org, t

    MediumCVSS 5.1Proof of conceptEPSS 15%

    mozilla · firefoxMay 9, 2005

  • CVE-2005-1261
    34Monitor

    Stack-based buffer overflow in the URL parsing function in Gaim before 1.3.0 allows remote attackers to execute arbitrary code via an instan

    HighCVSS 7.5Proof of conceptEPSS 12%

    rob flynn · gaimMay 11, 2005

  • CVE-2005-1496
    29Monitor

    The DBMS_Scheduler in Oracle 10g allows remote attackers with CREATE JOB privileges to gain additional privileges by changing SESSION_USER t

    MediumCVSS 4.6No exploitEPSS 38%

    oracle · application serverMay 11, 2005

  • CVE-2005-1513
    42Plan

    Integer overflow in the stralloc_readyplus function in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows

    CriticalCVSS 9.8No exploitEPSS 10%

    qmail project · qmailMay 11, 2005

  • CVE-2005-1544
    34Monitor

    Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsP

    HighCVSS 7.5Proof of conceptEPSS 14%

    libtiff · libtiffMay 14, 2005

  • CVE-2005-1193
    35Monitor

    The bbencode_second_pass and make_clickable functions in bbcode.php for phpBB before 2.0.15, as used in viewtopic.php, privmsg.php, and othe

    HighCVSS 7.5Proof of conceptEPSS 16%

    phpbb group · phpbbMay 16, 2005

  • CVE-2005-1365
    44Plan

    Pico Server (pServ) 3.2 and earlier allows remote attackers to execute arbitrary commands via a URL with multiple leading "/" (slash) charac

    CriticalCVSS 10.0Proof of conceptEPSS 12%

    pico server · pico serverMay 16, 2005

  • CVE-2005-1598
    34Monitor

    SQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via a

    HighCVSS 7.5Proof of conceptEPSS 13%

    invision power services · invision boardMay 16, 2005

  • CVE-2005-1628
    33Monitor

    apage.cgi in WebAPP 0.9.9.2.1, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters

    HighCVSS 7.5Proof of conceptEPSS 10%

    web-app.org · webappMay 17, 2005

  • CVE-2005-1649
    27Monitor

    The IPv6 support in Windows XP SP2, 2003 Server SP1, and Longhorn, with Windows Firewall turned off, allows remote attackers to cause a deni

    MediumCVSS 5.0Proof of conceptEPSS 21%

    microsoft · windows 2003 serverMay 18, 2005

  • CVE-2005-1664
    31Monitor

    The __VIEWSTATE functionality in Microsoft ASP.NET 1.x allows remote attackers to conduct replay attacks to (1) apply a ViewState generated

    MediumCVSS 6.4No exploitEPSS 18%

    microsoft · asp.netMay 18, 2005

  • CVE-2005-1665
    32Monitor

    The __VIEWSTATE functionality in Microsoft ASP.NET 1.x, when not cryptographically signed, allows remote attackers to cause a denial of serv

    MediumCVSS 5.0No exploitEPSS 40%

    microsoft · asp.netMay 18, 2005

  • CVE-2005-1683
    14Monitor

    Buffer overflow in winword.exe 10.2627.6714 and earlier in Microsoft Word for the Macintosh, before SP3 for Word 2002, allows remote attacke

    LowCVSS 2.6No exploitEPSS 14%

    microsoft · wordMay 20, 2005

  • CVE-2005-1252
    24Monitor

    Directory traversal vulnerability in the Web Calendaring server in Ipswitch Imail 8.13, and other versions before IMail Server 8.2 Hotfix 2,

    MediumCVSS 5.0No exploitEPSS 12%

    ipswitch · imailMay 25, 2005

  • CVE-2005-1255
    53Plan

    Multiple stack-based buffer overflows in the IMAP server in IMail 8.12 and 8.13 in Ipswitch Collaboration Suite (ICS), and other versions be

    CriticalCVSS 10.0Proof of conceptEPSS 42%

    ipswitch · imailMay 25, 2005

  • CVE-2005-1256
    58Plan

    Stack-based buffer overflow in the IMAP daemon (IMAPD32.EXE) in IMail 8.13 in Ipswitch Collaboration Suite (ICS), and other versions before

    CriticalCVSS 10.0No exploitEPSS 58%

    ipswitch · imailMay 25, 2005

  • CVE-2005-1543
    50Plan

    Multiple stack-based and heap-based buffer overflows in Remote Management authentication (zenrem32.exe) on Novell ZENworks 6.5 Desktop and S

    HighCVSS 7.5WeaponizedEPSS 66%

    novell · zenworksMay 25, 2005

  • CVE-2005-1827
    36Monitor

    D-Link DSL-504T allows remote attackers to bypass authentication and gain privileges, such as upgrade firmware, restart the router or restor

    HighCVSS 7.5Proof of conceptEPSS 19%

    dlink · dsl-504t firmwareMay 26, 2005

  • CVE-2005-1787
    34Monitor

    setup.php in phpStat 1.5 allows remote attackers to bypass authentication and gain administrator privileges by setting the $check variable.

    HighCVSS 7.5Proof of conceptEPSS 12%

    phpstat · phpstatMay 27, 2005

  • CVE-2005-1806
    34Monitor

    Format string vulnerability in PeerCast 0.1211 and earlier allows remote attackers to execute arbitrary code via format strings in the URL.

    HighCVSS 7.5Proof of conceptEPSS 11%

    peercast · peercastMay 28, 2005

  • CVE-2005-1829
    24Monitor

    Microsoft Internet Explorer 6 SP2 allows remote attackers to cause a denial of service (infinite loop and application crash) via two embedde

    MediumCVSS 5.0No exploitEPSS 12%

    microsoft · internet explorerMay 28, 2005

  • CVE-2005-0356
    45Plan

    Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attacke

    MediumCVSS 5.0Proof of conceptEPSS 82%

    cisco · agent desktopMay 31, 2005

  • CVE-2005-1907
    26Monitor

    The ISA Firewall service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of serv

    MediumCVSS 5.0No exploitEPSS 19%

    microsoft · isa serverMay 31, 2005