Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2005-05-24 CVE-2005-1732 Remote Security vulnerability in Cookie Cart
Cookie Cart allows remote attackers to read the Order Notification list via the testmycgi and path parameters to testmy.cgi.
network
low complexity
metro-marketing
5.0
2005-05-24 CVE-2005-1719 Unspecified vulnerability in Alwil Avast Antivirus
Unknown vulnerability in ALWIL avast! antivirus 4 (4.6.6230) and earlier, when running on Windows NT 4.0, does not properly detect certain viruses.
network
low complexity
alwil
7.5
2005-05-24 CVE-2005-1718 Denial-Of-Service vulnerability in LS Games WAR Times 1.03
Buffer overflow in LS Games War Times 1.03 and earlier allows remote attackers to cause a denial of service (server crash) via a long nickname.
network
low complexity
ls-games
5.0
2005-05-24 CVE-2005-1717 Remote Denial of Service vulnerability in Zyxel Prestige 650R-31 3.40Ko.1
ZyXEL Prestige 650R-31 router running ZyNOS FW v3.40(KO.1) allows remote attackers to cause a denial of service (CPU consumption and network loss) via crafted fragmented IP packets.
network
low complexity
zyxel
5.0
2005-05-24 CVE-2005-1716 Information Disclosure vulnerability in Topo 2.2/2.2.178
TOPo 2.2 (2.2.178) stores data files in the data directory under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as client IP addresses.
network
low complexity
ej3
5.0
2005-05-24 CVE-2005-1715 Index.PHP Cross-Site Scripting vulnerability in EJ3 Topo 2.2/2.2.178
Cross-site scripting (XSS) vulnerability in index.php for TOPo 2.2 (2.2.178) allows remote attackers to inject arbitrary web script or HTML via the (1) m, (2) s, (3) ID, or (4) t parameters, or the (5) field name, (6) Your Web field, or (7) email field in the comments section.
network
ej3
4.3
2005-05-24 CVE-2005-1714 Unspecified vulnerability in Netwin Surgemail 3.0C2
Cross-site scripting (XSS) vulnerability in NetWin SurgeMail 3.0c2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
network
netwin
4.3
2005-05-24 CVE-2005-1713 Unspecified vulnerability in S9Y Serendipity 0.8
Multiple cross-site scripting (XSS) vulnerabilities in Serendipity 0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) templatedropdown and (2) shoutbox plugins.
network
s9y
4.3
2005-05-24 CVE-2005-1712 Remote Security vulnerability in SY9 Serendipity 0.8
Unknown vulnerability in Serendipity 0.8, when used with multiple authors, allows unprivileged authors to upload arbitrary media files.
network
low complexity
sy9
7.5
2005-05-24 CVE-2005-1711 Gibraltar Firewall 2.2 and earlier, when using the ClamAV update to 0.81 for Squid, uses a defunct ClamAV method to scan memory for viruses, which does not return an error code and prevents viruses from being detected.
network
low complexity
clam-anti-virus gibraltar squid
7.5