Vulnerabilities
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2005-05-16 | CVE-2005-1601 | Unspecified vulnerability in MRO Software Maximo Self Service 4.0/5.0 MRO Maximo Self Service 4 and 5 stores certain information under the web document root using file extensions that are not processed by Tomcat, which allows remote attackers to obtain sensitive information via a direct request for the file, such as MXServer.properties. | 5.0 |
| 2005-05-16 | CVE-2005-1600 | Unspecified vulnerability in Libtomcrypt 1.0/1.0.1/1.0.2 A "mathematical flaw" in the implementation of the El Gamal signature algorithm for LibTomCrypt 1.0 to 1.0.2 allows attackers to generate valid signatures without having the private key. | 7.5 |
| 2005-05-16 | CVE-2005-1599 | HTML Injection vulnerability in Kryloff Technologies Subject Search Server 1.1 Cross-site scripting (XSS) vulnerability in Kryloff Technologies Subject Search Server (SSServer) 1.1 allows remote attackers to inject arbitrary web script or HTML via the "Search For" field. network kryloff-technologies | 4.3 |
| 2005-05-16 | CVE-2005-1598 | SQL Injection vulnerability in Invision Power Board Login.PHP SQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via a crafted cookie password hash (pass_hash) that modifies the internal $pid variable. | 7.5 |
| 2005-05-16 | CVE-2005-1597 | Cross-Site Scripting vulnerability in Invision Power Board Topics.PHP Highlite Parameter Cross-site scripting (XSS) vulnerability in (1) search.php and (2) topics.php for Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the highlite parameter. network invision-power-services | 4.3 |
| 2005-05-16 | CVE-2005-1595 | Input Validation vulnerability in Codethat Shoppingcart 1.3.1 CodeThat ShoppingCart 1.3.1 stores config.ini under the web root, which allows remote attackers to obtain sensitive information via a direct request. | 5.0 |
| 2005-05-16 | CVE-2005-1594 | Input Validation vulnerability in Codethat Shoppingcart 1.3.1 SQL injection vulnerability in catalog.php for CodeThat ShoppingCart 1.3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. | 7.5 |
| 2005-05-16 | CVE-2005-1593 | Input Validation vulnerability in Codethat Shoppingcart 1.3.1 Cross-site scripting (XSS) vulnerability in catalog.php for CodeThat ShoppingCart 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. network codethat | 6.8 |
| 2005-05-16 | CVE-2005-1592 | Remote Security vulnerability in BirdBlog Multiple "javascript vulerabilities in BB code" in BirdBlog before 1.3.1 allow remote attackers to inject arbitrary Javascript. | 7.5 |
| 2005-05-16 | CVE-2005-1591 | Denial-Of-Service vulnerability in Solaris Unknown vulnerability in NIS+ on Solaris 7, 8, and 9 allows remote attackers to cause a denial of service (rpc.nisd disabled and NIS+ unavailable) via unknown vectors. | 5.0 |