Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2005-05-02 CVE-2005-1192 Remote Denial Of Service vulnerability in HP-UX ICMP PMTUD
Unknown vulnerability in HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23, when running TCP/IP on IPv4, allows remote attackers to cause a denial of service via certain packets, related to the PMTU, a different vulnerability than CVE-2004-1060.
network
low complexity
hp
5.0
2005-05-02 CVE-2005-1191 Unspecified vulnerability in Microsoft products
The Web View DLL (webvw.dll), as used in Windows Explorer on Windows 2000 systems, does not properly filter an apostrophe ("'") in the author name in a document, which allows attackers to execute arbitrary script via extra attributes when Web View constructs a mailto: link for the preview pane when the user selects the file.
network
low complexity
microsoft
5.0
2005-05-02 CVE-2005-1190 Denial-Of-Service vulnerability in Webcamxp Pro
WebcamXP PRO v2.16.468 and earlier allows remote attackers to cause a denial of service via a long chat name, which takes up too much display space and prevents the chat frame from being properly rendered.
network
low complexity
webcamxp
5.0
2005-05-02 CVE-2005-1189 Cross-Site Scripting vulnerability in Webcamxp Pro
Cross-site scripting (XSS) vulnerability in WebcamXP PRO v2.16.468 and earlier allows remote attackers to inject arbitrary web script or HTML via the chat name, as demonstrated by using an IFRAME to redirect users to other sites.
network
webcamxp
4.3
2005-05-02 CVE-2005-1188 Cross-Site Scripting vulnerability in Comersus Cart Comersus_Search_Item.ASP
Cross-site scripting (XSS) vulnerability in comersus_searchItem.asp in Comersus 3.90 to 4.51 allows remote attackers to inject arbitrary web script or HTML via the curPage parameter.
4.3
2005-05-02 CVE-2005-1186 Cross-Site Scripting vulnerability in Jukebox
Musicmatch Jukebox 10.00.2047 and earlier adds the musicmatch.com domain to the Trusted Sites zone in Internet Explorer, which allows systems in the domain to conduct unauthorized activities, as demonstrated using cross-site scripting (XSS) attacks.
network
musicmatch
6.8
2005-05-02 CVE-2005-1185 Local Security vulnerability in Jukebox
Unquoted Windows search path vulnerability in Musicmatch Jukebox 10.00.2047 and earlier allows local users to gain privileges via a malicious C:\program.exe file, which is run by MMFWLaunch.exe when it attempts to execute launch.exe.
local
low complexity
musicmatch
4.6
2005-05-02 CVE-2005-1184 Denial Of Service vulnerability in Multiple Vendor TCP Session Acknowledgement Number
The TCP/IP stack in multiple operating systems allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the correct sequence number but the wrong Acknowledgement number, which generates a large number of "keep alive" packets.
network
low complexity
microsoft
5.0
2005-05-02 CVE-2005-1183 Cross-Site Scripting vulnerability in Mvnforum 1.0Rc4
Cross-site scripting (XSS) vulnerability in mvnForum 1.0 RC4 allows remote attackers to inject arbitrary web script or HTML via the Search parameter.
network
mvnforum
4.3
2005-05-02 CVE-2005-1182 Denial-Of-Service vulnerability in IBM OS 400 R510/R520/R530
Unknown vulnerability in Incoming Remote Command (iSeries Access for Windows Remote Command service) in IBM OS/400 R510, R520, and R530 allows attackers to cause a denial of service (IRC shutdown) via certain inputs.
network
low complexity
ibm
5.0