Vulnerabilities > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2005-07-12 | CVE-2005-1219 | Buffer Overflow vulnerability in Microsoft Windows Color Management Module ICC Profile Buffer overflow in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code via an image with crafted ICC profile format tags. | 7.5 |
| 2005-07-12 | CVE-2005-0564 | Unspecified vulnerability in Microsoft Word 2000/2002 Stack-based buffer overflow in Microsoft Word 2000 and Word 2002, and Microsoft Works Suites 2000 through 2004, might allow remote attackers to execute arbitrary code via a .doc file with long font information. | 7.5 |
| 2005-07-11 | CVE-2005-2213 | Remote Security vulnerability in MMS Ripper Buffer overflow in the mms_interp_header function in mms.c in MMS Ripper before 0.6.4 might allow remote attackers to execute arbitrary code via a file with more than 20 streams. | 7.5 |
| 2005-07-11 | CVE-2005-2206 | SQL-Injection vulnerability in CartWIZ Multiple SQL injection vulnerabilities in CartWIZ allow remote attackers to modify SQL statements via the (1) idProduct parameter to tellAFriend.asp, (2) sortType parameter to viewSupportTickets.asp, or the id parameter to (3) updateCreditCards.asp or (4) deleteCreditCards.asp. | 7.5 |
| 2005-07-11 | CVE-2005-2205 | Remote Command Execution vulnerability in Pngren 2.0.1 The ReadLog function in kaiseki.cgi in pngren allows remote attackers to execute arbitrary commands via shell metacharacters in the query string. | 7.5 |
| 2005-07-11 | CVE-2005-2203 | Security Bypass vulnerability in phpWishlist login.php in phpWishlist before 0.1.15 allows remote attackers to bypass authentication via a direct request to admin.php. | 7.5 |
| 2005-07-11 | CVE-2005-2200 | Security Bypass vulnerability in Xerox Workcentre 2128, Workcentre 2636 and Workcentre 3545 Multiple unknown vulnerabilities in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, version 0.001.04.044 through 0.001.04.504, allow attackers to bypass authentication. | 7.5 |
| 2005-07-11 | CVE-2005-2199 | Unspecified vulnerability in Skrypty PPA Gallery 0.5.6 PHP remote file inclusion vulnerability in inc/functions.inc.php in PPA web photo gallery 0.5.6 allows remote attackers to execute arbitrary code via the config[ppa_root_path] variable. | 7.5 |
| 2005-07-11 | CVE-2005-2198 | Unspecified vulnerability in Spid PHP remote file inclusion vulnerability in lang.php in SPiD before 1.3.1 allows remote attackers to execute arbitrary code via the lang_path parameter. | 7.5 |
| 2005-07-11 | CVE-2005-2197 | SQL Injection vulnerability in ID Board ID Board 1.1.3 SQL injection vulnerability in sql.cls.php in Id Board 1.1.3 allows remote attackers to modify SQL queries, as demonstrated using the f parameter to index.php. | 7.5 |