2005

The browser user interface in Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 does not properly d

Firefox before 1.0.5, Thunderbird before 1.0.5, Mozilla before 1.7.9, Netscape 8.0.2, and K-Meleon 0.9 runs XBL scripts

Firefox before 1.0.5 allows remote attackers to steal sensitive information by opening a malicious link in the Firefox s

Firefox before 1.0.5 allows remote attackers to steal information and possibly execute arbitrary code by using standalon

Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 does not properly verify the associated types of DOM node

Firefox before 1.0.5 and Mozilla before 1.7.9 does not properly clone base objects, which allows remote attackers to exe

Directory traversal vulnerability in PhpAuction 2.5 allows remote attackers to read arbitrary files, include local PHP f

Firefox 1.0.3 and 1.0.4, and Netscape 8.0.2, allows remote attackers to execute arbitrary code by tricking the user into

Directory traversal vulnerability in DownloadProtect before 1.0.3 allows remote attackers to read files above the downlo

Encoded directory traversal vulnerability in phpPgAdmin 3.1 to 3.5.3 allows remote attackers to access arbitrary files v

The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a

Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of serv

Firefox before 1.0.5 and Mozilla before 1.7.9 allows a child frame to call top.focus and other methods in a parent frame

options_identities.php in SquirrelMail 1.4.4 and earlier uses the extract function to process the $_POST variable, which

Multiple cross-site scripting (XSS) vulnerabilities in PhpAuction 2.5 allow remote attackers to inject arbitrary web scr

Firefox before 1.0.5 and Mozilla before 1.7.9 does not clearly associate a Javascript dialog box with the web page that

iCab 2.9.8 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote a

Safari version 2.0 (412) does not clearly associate a Javascript dialog box with the web page that generated it, which a

Opera 7.x and 8 before 8.01 does not clearly associate a Javascript dialog box with the web page that generated it, whic

Microsoft Internet Explorer 6.0 does not clearly associate a Javascript dialog box with the web page that generated it,

Unknown vulnerability in the HTTPMail service in MailEnable Professional before 1.6 has unknown impact and attack vector

Multiple unknown vulnerabilities in Moodle before 1.5.1 have unknown impact and attack vectors.

Stack-based buffer overflow in Microsoft Word 2000 and Word 2002, and Microsoft Works Suites 2000 through 2004, might al

Buffer overflow in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code v

PHP remote file inclusion vulnerability in gals.php in PhotoGal Photo Gallery 1.5 and earlier allows remote attackers to

Multiple SQL injection vulnerabilities in Dragonfly Commerce allows remote attackers to modify SQL statements and possib

Blog Torrent 0.92 and earlier stores sensitive files under the web document root in the (1) data or (2) torrents directo

Unknown vulnerability in F5 BIG-IP 9.0.2 through 9.1 allows attackers to "subvert the authentication of SSL transactions

Multiple PHP remote file inclusion vulnerabilities in iPhotoAlbum 1.1 allow remote attackers to execute arbitrary code v

Unknown vulnerability in arshell in the Array Service (arrayd) for SGI ProPack 3 with SP 5 and 6, and SGI ProPack 4, all

Softiacom wMailserver 1.0 stores passwords in plaintext in the Darsite\MAILSRV\Admin key, which allows local users to ga

Buffer overflow in multiple "p" commands in IBM AIX 5.1, 5.2 and 5.3 might allow local users to execute arbitrary code v

Buffer overflow in the getlvname command in IBM AIX 5.1, 5.2 and 5.3, might allow local users to execute arbitrary code

Buffer overflow in the diagTasksWebSM command in IBM AIX 5.1, 5.2 and 5.3, might allow local users to execute arbitrary

Format string vulnerability in the paginit command in IBM AIX 5.3, and possibly other versions, might allow local users

Format string vulnerability in the swcons command in IBM AIX 5.3, and possibly other versions, might allow local users t

Dansie Shopping Cart stores the vars.dat file under the web root with insufficient access control, which might allow rem

Dragonfly Commerce allows remote attackers to change a product price by modifying the x_DragonflyCartProductPrice hidden

Unknown vulnerability in the SMTP service in MailEnable Standard before 1.9 and Professional before 1.6 allows remote at

aspnet_wp.exe in Microsoft ASP.NET web services allows remote attackers to cause a denial of service (CPU consumption fr

Microsoft MSN Messenger allows remote attackers to cause a denial of service via a plaintext message containing the ".pi

Microsoft Outlook Express 6.0 leaks the default news server account when a user responds to a "watched" conversation thr

Web Wiz Forums 7.9 and 8.0 allows remote attackers to view message titles of a hidden forum.

oftpd 0.3.7 allows remote attackers to cause a denial of service via a USER command with a large number of null (\0) cha

Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 does no

Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 allows

Memory leak in inetinfo.exe in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4

The aupair service (aupair.exe) in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, a

Hosting Controller 6.1 Hotfix 2.1 allows remote authenticated users to perform unauthorized actions, such as modifying t

Buffer overflow in invscout in IBM AIX 5.1.0 through 5.3.0 might allow local users to execute arbitrary code via a long