Vulnerabilities > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2004-12-31 | CVE-2004-1507 | Remote vulnerability in WebCalendar CRLF injection vulnerability in login.php in WebCalendar allows remote attackers to inject CRLF sequences via the return_path parameter and perform HTTP Response Splitting attacks to modify expected HTML content from the server. | 5.0 |
| 2004-12-31 | CVE-2004-1506 | Remote vulnerability in WebCalendar Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar allow remote attackers to inject arbitrary web script via (1) view_entry.php, (2) view_d.php, (3) usersel.php, (4) datesel.php, (5) trailer.php, or (6) styles.php, as demonstrated using img srg tags. network webcalendar | 4.3 |
| 2004-12-31 | CVE-2004-1504 | Information Disclosure vulnerability in Salims Softhouse JAF CMS 3.0 The displaycontent function in config.php for Just Another Flat file (JAF) CMS 3.0RC allows remote attackers to gain sensitive information via a blank show parameter, which reveals the installation path in an error message, as demonstrated using index.php. | 5.0 |
| 2004-12-31 | CVE-2004-1503 | Remote Denial Of Service vulnerability in Sun Java Runtime Environment InitialDirContext Integer overflow in the InitialDirContext in Java Runtime Environment (JRE) 1.4.2, 1.5.0 and possibly other versions allows remote attackers to cause a denial of service (Java exception and failed DNS requests) via a large number of DNS requests, which causes the xid variable to wrap around and become negative. | 5.0 |
| 2004-12-31 | CVE-2004-1502 | Denial-Of-Service vulnerability in 602Lan Suite The Telnet proxy in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause a denial of service (socket exhaustion) via a Telnet request to an IP address of the proxy's network interface, which causes a loop. | 5.0 |
| 2004-12-31 | CVE-2004-1501 | Denial-Of-Service vulnerability in 602Lan Suite The webmail service in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) by sending a POST request with a large Content-Length value, then disconnecting without sending that amount of data. | 5.0 |
| 2004-12-31 | CVE-2004-1499 | Input Validation vulnerability in WebHost Automation Helm Control Panel Cross-site scripting (XSS) vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers to execute arbitrary web script or HTML via the Subject field. network webhost-automation | 4.3 |
| 2004-12-31 | CVE-2004-1497 | Web Forums Server 1.6 and 2.0 Power Pack stores passwords in plaintext in the Username.ini file, which allows local users to gain privileges. | 4.6 |
| 2004-12-31 | CVE-2004-1496 | Directory Traversal vulnerability in Minihttpserver.Net web Forums Server 1.6/2.0Powerpack Directory traversal vulnerability in Web Forums Server 1.6 and 2.0 Power Pack allows remote attackers to read arbitrary files via a URL containing (1) "..\" (dot dot backslash), (2) "../" (dot dot slash), (3) "/%2E%2E%5C" (encoded dot dot backslash), or (4) "%2E%2E%2F" (encoded dot dot slash). | 5.0 |
| 2004-12-31 | CVE-2004-1494 | Denial-Of-Service vulnerability in Xdict Buffer overflow in the Screen Fetch option in XDICT 2002 through 2005 allows remote attackers to cause a denial of service ( CPU consumption or application exit) and possibly execute arbitrary code via a long string. | 5.0 |