rainbutterfly/cve_corpus huggingface dataset:
CVE-2005-0747 
ApplyYourself i-Class allows remote attackers to obtain sensitive information about their own applications by reusing the hidden ID field, as demonstrated using the id parameter to ApplicantDecision.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-13T05:00:00.000Z
CVE-2005-0748 
PHP remote file inclusion vulnerability in initdb.php for WEBInsta Mailing list manager 1.3d allows remote attackers to execute arbitrary PHP code by modifying the absolute_path parameter to reference a URL on a remote web server that contains the code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-13T05:00:00.000Z
CVE-2005-0749 
The load_elf_library in the Linux kernel before 2.6.11.6 allows local users to cause a denial of service (kernel crash) via a crafted ELF library or executable, which causes a free of an invalid pointer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-05T04:00:00.000Z
CVE-2005-0750 
The bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 through 2.6.11.5 allows local users to gain privileges via (1) socket or (2) socketpair call with a negative protocol value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-03T05:00:00.000Z
CVE-2005-0752 
The Plugin Finder Service (PFS) in Firefox before 1.0.3 allows remote attackers to execute arbitrary code via a javascript: URL in the PLUGINSPAGE attribute of an EMBED tag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-18T04:00:00.000Z
CVE-2005-0753 
Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-21T04:00:00.000Z
CVE-2005-0754 
Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-24T04:00:00.000Z
CVE-2005-0755 
Heap-based buffer overflow in RealPlayer 10 and earlier, Helix Player before 10.0.4, and RealOne Player v1 and v2 allows remote attackers to execute arbitrary code via a long hostname in a RAM file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-21T04:00:00.000Z
CVE-2005-0756 
ptrace in Linux kernel 2.6.8.1 does not properly verify addresses on the amd64 platform, which allows local users to cause a denial of service (kernel crash).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-14T04:00:00.000Z
CVE-2005-0757 
The xattr file system code, as backported in Red Hat Enterprise Linux 3 on 64-bit systems, does not properly handle certain offsets, which allows local users to cause a denial of service (system crash) via certain actions on an ext3 file system with extended attributes enabled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-18T04:00:00.000Z
CVE-2005-0758 
zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-13T04:00:00.000Z
CVE-2005-0759 
ImageMagick before 6.0 allows remote attackers to cause a denial of service (application crash) via a TIFF image with an invalid tag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-26T05:00:00.000Z
CVE-2005-0760 
The TIFF decoder in ImageMagick before 6.0 allows remote attackers to cause a denial of service (crash) via a crafted TIFF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-26T05:00:00.000Z
CVE-2005-0761 
Unknown vulnerability in ImageMagick before 6.1.8 allows remote attackers to cause a denial of service (application crash) via a crafted PSD file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-26T05:00:00.000Z
CVE-2005-0762 
Heap-based buffer overflow in the SGI parser in ImageMagick before 6.0 allows remote attackers to execute arbitrary code via a crafted SGI image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-26T05:00:00.000Z
CVE-2005-0763 
Buffer overflow in Midnight Commander (mc) 4.5.55 and earlier may allow attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-29T05:00:00.000Z
CVE-2005-0764 
Buffer overflow in command.C for rxvt-unicode before 5.3 allows remote attackers to execute arbitrary code via a crafted file containing long escape sequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-22T05:00:00.000Z
CVE-2005-0765 
Unknown vulnerability in the JXTA dissector in Ethereal 0.10.9 allows remote attackers to cause a denial of service (application crash).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-18T05:00:00.000Z
CVE-2005-0766 
Unknown vulnerability in the sFlow dissector in Ethereal 0.9.14 through 0.10.9 allows remote attackers to cause a denial of service (application crash).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-18T05:00:00.000Z
CVE-2005-0767 
Race condition in the Radeon DRI driver for Linux kernel 2.6.8.1 allows local users with DRI privileges to execute arbitrary code as root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-18T05:00:00.000Z
CVE-2005-0768 
Buffer overflow in the administration web server for GoodTech Telnet Server 4.0 and 5.0, and possibly all versions before 5.0.7, allows remote attackers to execute arbitrary code via a long string to port 2380.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-18T05:00:00.000Z
CVE-2005-0769 
Multiple buffer overflows in OpenSLP before 1.1.5 allow remote attackers to have an unknown impact via malformed SLP packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-18T05:00:00.000Z
CVE-2005-0770 
Format string vulnerability in DataRescue Interactive Disassembler and Debugger (IDA) Pro 4.7.0.830 allows remote attackers or local users to cause a denial of service (CPU consumption or application crash) and possibly execute arbitrary code via format string specifiers in a dynamic link library (DLL) name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-18T05:00:00.000Z
CVE-2005-0771 
VERITAS Backup Exec Server (beserver.exe) 9.0 through 10.0 for Windows allows remote unauthenticated attackers to modify the registry by calling methods to the RPC interface on TCP port 6106.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-29T04:00:00.000Z
CVE-2005-0772 
VERITAS Backup Exec 9.0 through 10.0 for Windows Servers, and 9.0.4019 through 9.1.307 for Netware, allows remote attackers to cause a denial of service (Remote Agent crash) via (1) a crafted packet in NDMLSRVR.DLL or (2) a request packet with an invalid (non-0) "Error Status" value, which triggers a null dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-26T04:00:00.000Z
CVE-2005-0773 
Stack-based buffer overflow in VERITAS Backup Exec Remote Agent 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.307 for Netware allows remote attackers to execute arbitrary code via a CONNECT_CLIENT_AUTH request with authentication method type 3 (Windows credentials) and a long password argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-29T04:00:00.000Z
CVE-2005-0774 
SQL injection vulnerability in member.php and possibly other scripts in PhotoPost PHP 5.0 RC3 allows remote attackers to execute arbitrary SQL commands via the uid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0775 
The reportpost action in misc.php for PhotoPost PHP 5.0 RC3 does not limit the logging data that is sent to the administrator, which allows remote attackers to send large amounts of email to the administrator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0776 
adm-photo.php in PhotoPost PHP 5.0 RC3 does not properly verify administrative privileges before manipulating photos, which could allow remote attackers to manipulate other users' photos.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0777 
Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP 5.0 RC3 allow remote attackers to inject arbitrary web script or HTML via (1) the check_tags function or (2) the editbio field in the user profile.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0778 
PhotoPost PHP 5.0 RC3 does not fully verify that an uploaded file is an image file, which allows remote attackers to inject arbitrary Javascript by uploading non-image files with an image extension such as .gif.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0779 
PlatinumFTP 1.0.18, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) via multiple connection attempts with a \ (backslash) in the username.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0780 
paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) auth.php, (2) login.php, (3) category.php, (4) file.php, (5) team.php, (6) license.php, (7) custom.php, (8) admins.php, or (9) backupdb.php, which reveal the path in a PHP error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0781 
SQL injection vulnerability in (1) viewall.php and (2) category.php in paFileDB 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter to pafiledb.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0782 
Cross-site scripting (XSS) vulnerability in (1) viewall.php and (2) category.php for paFileDB 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the start parameter to pafiledb.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0783 
Cross-site scripting (XSS) vulnerability in Phorum before 5.0.14a allows remote attackers to inject arbitrary web script or HTML via the filename of an attached file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0784 
Multiple cross-site scripting (XSS) vulnerabilities in Phorum before 5.0.15 allow remote attackers to inject arbitrary web script or HTML via (1) the subject line to follow.php or (2) the subject line in the user's personal control panel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0785 
Cross-site scripting (XSS) vulnerability in usersrecentposts in YaBB 2.0 rc1 allows remote attackers to inject arbitrary web script or HTML via the username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0786 
SQL injection vulnerability in gb_new.inc in SimpGB allows remote attackers to execute arbitrary SQL commands via the quote parameter to guestbook.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0787 
Wine 20050211 and earlier creates temp files with world readable permissions and predictable file names, which allows local users to obtain sensitive information, such as passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0788 
LimeWire 4.1.2 through 4.5.6 allows remote attackers to read arbitrary files by specifying the full pathname in a Gnutella GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0789 
Directory traversal vulnerability in LimeWire 3.9.6 through 4.6.0 allows remote attackers to read arbitrary files via a .. (dot dot) in a magnet request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0790 
phpAdsNew 2.0.4 allows remote attackers to obtain sensitive information via a direct request to (1) lib-xmlrpcs.inc.php, (2) maintenance-activation.php, (3) maintenance-cleantables.php, (4) maintenance-autotargeting.php, (5) maintenance-reports.php, (6) phpads.php, (7) remotehtmlview.php, (8) click.php, (9) adcontent.php, which reveal the path in a PHP error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0791 
Cross-site scripting (XSS) vulnerability in adframe.php in phpAdsNew 2.0.4-pr1, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the refresh parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0792 
SQL injection vulnerability in ZPanel 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) uname parameter to index.php or (2) page parameter to zpanel.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0793 
PHP remote file inclusion vulnerability in zpanel.php in ZPanel allows remote attackers to (1) execute arbitrary PHP code in ZPanel 2.0 or (2) include local files in ZPanel 2.5 beta 10 and earlier by modifying the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0794 
ZPanel 2.0 and 2.5 beta 10 does not remove or protect installation scripts after they have been used, which allows remote attackers to reinstall the software and possibly cause a denial of service via a direct request to install.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0795 
HolaCMS 1.4.9 does not restrict file access to the holaDB/votes directory, which allows remote attackers to overwrite arbitrary files via a modified vote_filename parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0796 
Directory traversal vulnerability in HolaCMS 1.4.9-1 allows remote attackers to overwrite arbitrary files via a "holaDB/votes" followed by a .. (dot dot) in the vote_filename parameter, which bypasses the check by HolaCMS to ensure that the file is in the holaDB/votes directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0797 
Novell iChain Mini FTP Server 2.3 displays different error messages if a user exists or not, which allows remote attackers to obtain sensitive information and facilitates brute force attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0798 
Novell iChain Mini FTP Server 2.3, and possibly earlier versions, does not limit the number of incorrect logins, which makes it easier for remote attackers to conduct brute force login attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0799 
MySQL 4.1.9, and possibly earlier versions, allows remote attackers with certain privileges to cause a denial of service (application crash) via a use command followed by an MS-DOS device name such as (1) LPT1 or (2) PRN.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0800 
PHP remote file inclusion vulnerability in install.php in mcNews 1.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the l parameter to reference a URL on a remote web server that contains the code, a different vulnerability than CVE-2005-0720.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0801 
Directory traversal vulnerability in includer.cgi in The Includer allows remote attackers to read arbitrary files via (1) a .. (dot dot) or (2) a full pathname in the URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0802 
Cross-site scripting (XSS) vulnerability in search.asp in ACS Blog 0.8 through 1.1b allows remote attackers to execute arbitrary web script or HTML via the search parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0803 
The GetEnhMetaFilePaletteEntries API in GDI32.DLL in Windows 2000 allows remote attackers to cause a denial of service (application crash) via a crafted Enhanced Metafile (EMF) file that causes invalid (1) end, (2) emreof, or (3) palent offsets to be used, aka "Enhanced Metafile Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0804 
Format string vulnerability in MailEnable 1.8 allows remote attackers to cause a denial of service (application crash) via format string specifiers in the mailto field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0805 
SQL injection vulnerability in index.php in Subdreamer Light, when magic_quotes_gpc is enabled, allows remote attackers to execute arbitrary SQL commands via certain parameters that are used as global variables, as demonstrated using the imageid parameter, which is not properly handled by imagegallery.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0806 
Evolution 2.0.3 allows remote attackers to cause a denial of service (application crash or hang) via crafted messages, possibly involving charsets in attachment filenames.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0807 
Multiple buffer overflows in Cain & Abel before 2.67 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via (1) an IKE packet with a large ID field that is not properly handled by the PSK sniffer filter, (2) the HTTP sniffer filter, or the (3) POP3, (4) SMTP, (5) IMAP, (6) NNTP, or (7) TDS sniffer filters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0808 
Apache Tomcat before 5.x allows remote attackers to cause a denial of service (application crash) via a crafted AJP12 packet to TCP port 8007.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0809 
NotifyLink, when configured for client key retrieval, allows remote attackers to obtain AES keys via a direct request to /hwp/get.asp, then uses a weak encryption scheme (fixed byte reordering) to protect the key, which allows remote attackers to obtain the key via a brute force attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0810 
SQL injection vulnerability in NotifyLink before 3.0 allows remote attackers to execute arbitrary SQL commands via the URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0811 
The web interface in NotifyLink 3.0 does not properly restrict access to functions that have been disabled in the GUI, which allows remote authenticated users to bypass intended restrictions via a direct request to certain URLs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0812 
The web interface in NotifyLink 3.0 displays passwords in cleartext on the administrative page, which could allow remote attackers or local users to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0813 
Buffer overflow in Initial Redirect (ir) Squid Proxy Plug-In 0.1 and 0.2 may allow attackers to cause a denial of service and execute arbitrary code via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0814 
Unknown vulnerability in lshd in Lysator LSH 1.x and 2.x before 2.0.1 allows remote attackers to cause a denial of service via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0815 
Multiple "range checking flaws" in the ISO9660 filesystem handler in Linux 2.6.11 and earlier may allow attackers to cause a denial of service or corrupt memory via a crafted filesystem.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0816 
Buffer overflow in newgrp in Solaris 7 through 9 allows local users to gain root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0817 
Unknown vulnerability in the DNSd proxy, as used in Symantec Gateway Security 5400 2.x and 5300 1.x, Enterprise Firewall 7.0.x and 8.x, and VelociRaptor 1100/1200/1300 1.5, allows remote attackers to poison the DNS cache and redirect users to malicious sites.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0818 
Cross-site scripting (XSS) vulnerability in PunBB 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the (1) email or (2) Jabber parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0819 
The xvesa code in Novell Netware 6.5 SP2 and SP3 allows remote attackers to redirect the xsession without authentication via a direct request to GUIMirror/Start.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0820 
Microsoft Office InfoPath 2003 SP1 includes sensitive information in the Manifest.xsf file in a custom .xsn form, which allows attackers to obtain printer and network information, obtain the database name, username, and password, or obtain the internal web server name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0821 
Unknown vulnerability in Citrix MetaFrame Conferencing Manager 3.0 allows conference members to bypass organizer restrictions to control the keyboard and mouse.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0822 
Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext although it is obfuscated when presented to a user, which allows users to view their secondary passwords even if it is not allowed by policy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z