Vulnerabilities > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2004-12-31 | CVE-2004-1522 | Remote Format String vulnerability in 3DO Army MEN Real Time Strategy Game 1.0 Format string vulnerability in Army Men RTS 1.0 allows remote attackers to cause a denial of service (application crash) via a nickname that contains format strings. | 5.0 |
| 2004-12-31 | CVE-2004-1521 | Remote Security vulnerability in Qualcomm Eudora 6.2.0.14 Eudora 6.2.0.14 does not issue a warning when a user forwards an e-mail message that contains base64 or quoted-printable encoded attachments, which makes it easier for remote attackers to read arbitrary files via spoofed "Converted" headers. | 5.0 |
| 2004-12-31 | CVE-2004-1520 | Remote Buffer Overflow vulnerability in Ipswitch Imail 8.13 Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a long IMAP DELETE command. | 4.6 |
| 2004-12-31 | CVE-2004-1518 | SQL Injection vulnerability in Phorum FOLLOW.PHP SQL injection vulnerability in follow.php in Phorum 5.0.12 and earlier allows remote authenticated users to execute arbitrary SQL command via the forum_id parameter. | 4.6 |
| 2004-12-31 | CVE-2004-1516 | Unspecified vulnerability in PHPwebsite CRLF injection vulnerability in index.php in phpWebSite 0.9.3-4 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the block_username parameter in the user module. | 5.0 |
| 2004-12-31 | CVE-2004-1514 | Remote vulnerability in Soft3304 04Webserver 1.42 04WebServer 1.42 allows remote attackers to cause a denial of service (fail to restart properly) via an HTTP request for an MS-DOS device name such as COM2. | 5.0 |
| 2004-12-31 | CVE-2004-1513 | Remote vulnerability in Soft3304 04Webserver 1.42 04WebServer 1.42 does not adequately filter data that is written to log files, which could allow remote attackers to inject carriage return characters into the log file and spoof log entries. | 5.0 |
| 2004-12-31 | CVE-2004-1512 | Remote vulnerability in Soft3304 04Webserver 1.42 Cross-site scripting (XSS) vulnerability in Response_default.html in 04WebServer 1.42 allows remote attackers to execute arbitrary web script or HTML via script code in the URL, which is not quoted in the resulting default error page. network soft3304 | 4.3 |
| 2004-12-31 | CVE-2004-1511 | Remote Security vulnerability in Hotfoon Hotfoon 4.0 does not notify users before opening links in web browsers, which could allow remote attackers to execute arbitrary code via a certain link sent in a chat window. | 5.0 |
| 2004-12-31 | CVE-2004-1509 | Remote vulnerability in WebCalendar validate.php in WebCalendar allows remote attackers to gain sensitive information via an invalid encoded_login parameter, which reveals the full path in an error message. | 5.0 |