Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: July 2005

27 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2005-0360
    24Monitor

    The Microsoft Log Sink Class ActiveX control in pkmcore.dll is marked as "safe for scripting" for Internet Explorer, which allows remote att

    MediumCVSS 5.0No exploitEPSS 12%

    microsoft · log sink class activex controlJul 5, 2005

  • CVE-2005-1921
    54Plan

    Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1

    HighCVSS 7.5WeaponizedEPSS 79%

    php · xml rpcJul 5, 2005

  • CVE-2005-2086
    56Plan

    PHP remote file inclusion vulnerability in viewtopic.php in phpBB 2.0.15 and earlier allows remote attackers to execute arbitrary PHP code.

    HighCVSS 7.5WeaponizedEPSS 85%

    phpbb group · phpbbJul 5, 2005

  • CVE-2005-2087
    38Monitor

    Internet Explorer 5.01 SP4 up to 6 on various Windows operating systems, including IE 6.0.2900.2180 on Windows XP, allows remote attackers t

    MediumCVSS 5.0Proof of conceptEPSS 61%

    microsoft · ieJul 5, 2005

  • CVE-2005-2088
    23Monitor

    The Apache HTTP server before 1.3.34, and 2.0.x before 2.0.55, when acting as an HTTP proxy, allows remote attackers to poison the web cache

    MediumCVSS 4.3No exploitEPSS 20%

    apache · http serverJul 5, 2005

  • CVE-2005-2089
    26Monitor

    Microsoft IIS 5.0 and 6.0 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attac

    MediumCVSS 4.3No exploitEPSS 30%

    microsoft · internet information servicesJul 5, 2005

  • CVE-2005-2090
    25Monitor

    Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application fi

    MediumCVSS 4.3No exploitEPSS 26%

    apache · tomcatJul 5, 2005

  • CVE-2005-2150
    26Monitor

    Windows NT 4.0 and Windows 2000 before URP1 for Windows 2000 SP4 does not properly prevent NULL sessions from accessing certain alternate na

    MediumCVSS 5.0No exploitEPSS 19%

    microsoft · windows 2000Jul 11, 2005

  • CVE-2005-2199
    33Monitor

    PHP remote file inclusion vulnerability in inc/functions.inc.php in PPA web photo gallery 0.5.6 allows remote attackers to execute arbitrary

    HighCVSS 7.5Proof of conceptEPSS 10%

    skrypty · ppa galleryJul 11, 2005

  • CVE-2005-0564
    38Monitor

    Stack-based buffer overflow in Microsoft Word 2000 and Word 2002, and Microsoft Works Suites 2000 through 2004, might allow remote attackers

    HighCVSS 7.5No exploitEPSS 25%

    microsoft · wordJul 12, 2005

  • CVE-2005-1219
    45Plan

    Buffer overflow in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code via an image with cra

    HighCVSS 7.5Proof of conceptEPSS 49%

    microsoft · image color managementJul 12, 2005

  • CVE-2005-2223
    35Monitor

    Unknown vulnerability in the SMTP service in MailEnable Standard before 1.9 and Professional before 1.6 allows remote attackers to cause a d

    MediumCVSS 5.0No exploitEPSS 50%

    mailenable · mailenable professionalJul 12, 2005

  • CVE-2005-2224
    25Monitor

    aspnet_wp.exe in Microsoft ASP.NET web services allows remote attackers to cause a denial of service (CPU consumption from infinite loop) vi

    MediumCVSS 5.0No exploitEPSS 17%

    microsoft · asp.netJul 12, 2005

  • CVE-2005-2225
    25Monitor

    Microsoft MSN Messenger allows remote attackers to cause a denial of service via a plaintext message containing the ".pif" string, which is

    MediumCVSS 5.0No exploitEPSS 16%

    microsoft · msn messenger serviceJul 12, 2005

  • CVE-2005-2226
    24Monitor

    Microsoft Outlook Express 6.0 leaks the default news server account when a user responds to a "watched" conversation thread, which could all

    MediumCVSS 5.0No exploitEPSS 13%

    microsoft · outlook expressJul 12, 2005

  • CVE-2005-2250
    33Monitor

    Buffer overflow in Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary code via a long

    HighCVSS 7.5Proof of conceptEPSS 10%

    nokia · affixJul 13, 2005

  • CVE-2005-2265
    40Plan

    Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of service (access violatio

    MediumCVSS 5.0WeaponizedEPSS 68%

    mozilla · firefoxJul 13, 2005

  • CVE-2005-2277
    44Plan

    Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters i

    CriticalCVSS 10.0Proof of conceptEPSS 12%

    nokia · affixJul 15, 2005

  • CVE-2005-1689
    42Plan

    Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitr

    CriticalCVSS 9.8No exploitEPSS 11%

    mit · kerberos 5Jul 18, 2005

  • CVE-2005-2278
    53Plan

    Stack-based buffer overflow in the IMAP daemon (imapd) in MailEnable Professional 1.54 allows remote authenticated users to execute arbitrar

    HighCVSS 7.2WeaponizedEPSS 84%

    mailenable · mailenable professionalJul 18, 2005

  • CVE-2005-2287
    40Plan

    SoftiaCom wMailServer 1.0 and 2.0 allows remote attackers to cause a denial of service (application crash) via a large TCP packet with a lea

    MediumCVSS 5.0WeaponizedEPSS 56%

    softiacom · wmailserverJul 18, 2005

  • CVE-2005-2297
    40Plan

    Stack-based buffer overflow in TreeAction.do in Sybase EAServer 4.2.5 through 5.2 allows remote authenticated users to execute arbitrary cod

    MediumCVSS 4.6WeaponizedEPSS 74%

    sybase · easerverJul 19, 2005

  • CVE-2005-2307
    28Monitor

    netman.dll in Microsoft Windows Connections Manager Library allows local users to cause a denial of service (Network Connections Service cra

    MediumCVSS 5.0Proof of conceptEPSS 25%

    microsoft · windows 2000Jul 19, 2005

  • CVE-2005-2308
    35Monitor

    The JPEG decoder in Microsoft Internet Explorer allows remote attackers to cause a denial of service (CPU consumption or crash) and possibly

    HighCVSS 7.5Proof of conceptEPSS 17%

    microsoft · ieJul 19, 2005

  • CVE-2005-2310
    41Plan

    Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute arbitrary code via an M

    CriticalCVSS 9.3Proof of conceptEPSS 13%

    nullsoft · winampJul 19, 2005

  • CVE-2005-2371
    27Monitor

    Directory traversal vulnerability in Oracle Reports 6.0, 6i, 9i, and 10g allows remote attackers to overwrite arbitrary files via (1) "..",

    MediumCVSS 5.0No exploitEPSS 22%

    oracle · reportsJul 26, 2005

  • CVE-2005-2373
    42Plan

    Buffer overflow in SlimFTPd 3.15 and 3.16 allows remote authenticated users to execute arbitrary code via a long directory name to (1) LIST,

    HighCVSS 7.2WeaponizedEPSS 45%

    whitsoft development · slimftpdJul 26, 2005