Vulnerabilities > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2005-05-16 | CVE-2005-1611 | Cross-Site Scripting vulnerability in web Crossing INC web Crossing 5.X Cross-site scripting (XSS) vulnerability in WebX in Web Crossing 5.x allows remote attackers to inject arbitrary web script or HTML via a URL with an "@" followed by the desired script. network web-crossing-inc | 6.8 |
| 2005-05-16 | CVE-2005-1610 | Cross-Site Scripting vulnerability in NukeET Base64 Codigo Variable Cross-site scripting (XSS) vulnerability in security.php for Tru-Zone NukeET 3.0 and 3.1 allows remote attackers to inject arbitrary web script or HTML via a base64 encoded Codigo parameter. network tru-zone | 6.8 |
| 2005-05-16 | CVE-2005-1608 | Multiple Unspecified vulnerability in AutoTheme PostNuke Module Multiple unknown vulnerabilities in the Blocks module in Spidean AutoTheme 1.7 and AT-Lite for PostNuke have unknown impact. | 5.0 |
| 2005-05-16 | CVE-2005-1607 | Unspecified vulnerability in Remote Cart Remote Cart Cross-site scripting (XSS) vulnerability in shop.cgi in Remote Cart allows remote attackers to inject arbitrary web script or HTML via the (1) merchant or (2) demo parameters. network remote-cart | 6.8 |
| 2005-05-16 | CVE-2005-1606 | Unspecified vulnerability in Positive Software H-Sphere Winbox 2.4.2Patch4/2.4.3Rc1 H-Sphere Winbox 2.4.2 and 2.4.3 RC1 stores sensitive information such as username and password in plaintext in world-readable log files, which allows local users to gain privileges. | 4.6 |
| 2005-05-16 | CVE-2005-1605 | HTML Injection vulnerability in Positive Software Corporation SiteStudio Cross-site scripting (XSS) vulnerability in the guestbook for SiteStudio 1.6 allows remote attackers to inject arbitrary web script or HTML via the name field to (1) psoft.guestbook.GuestBookServ in Standalone Site Studio or (2) E-Guest_sign.pl in Integrated Site Studio with H-Sphere. network positive-software | 6.8 |
| 2005-05-16 | CVE-2005-1603 | Remote File Manager Denial of Service vulnerability in Niteenterprises Remote File Manager 1.0 NiteEnterprises Remote File Manager 1.0 allows remote attackers to cause a denial of service (crash) via a crafted string to TCP port 7080. | 5.0 |
| 2005-05-16 | CVE-2005-1601 | Unspecified vulnerability in MRO Software Maximo Self Service 4.0/5.0 MRO Maximo Self Service 4 and 5 stores certain information under the web document root using file extensions that are not processed by Tomcat, which allows remote attackers to obtain sensitive information via a direct request for the file, such as MXServer.properties. | 5.0 |
| 2005-05-16 | CVE-2005-1599 | HTML Injection vulnerability in Kryloff Technologies Subject Search Server 1.1 Cross-site scripting (XSS) vulnerability in Kryloff Technologies Subject Search Server (SSServer) 1.1 allows remote attackers to inject arbitrary web script or HTML via the "Search For" field. network kryloff-technologies | 4.3 |
| 2005-05-16 | CVE-2005-1597 | Cross-Site Scripting vulnerability in Invision Power Board Topics.PHP Highlite Parameter Cross-site scripting (XSS) vulnerability in (1) search.php and (2) topics.php for Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the highlite parameter. network invision-power-services | 4.3 |