rainbutterfly/cve_corpus huggingface dataset:
CVE-2005-3718 
UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 does not allow users to disable access to (1) SNMP or (2) the rlogin port TCP 513, which allows remote attackers to exploit other vulnerabilities such as CVE-2005-3716, or execute arbitrary shell commands via rlogin, which does not require authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-21T11:00:00.000Z
CVE-2005-3719 
Hitachi IP5000 VOIP WIFI Phone 1.5.6 has a hard-coded administrator password of "0000", which allows attackers with physical access to obtain sensitive information and modify the phone's configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-21T11:00:00.000Z
CVE-2005-3720 
The default index page in the HTTP server in Hitachi IP5000 VOIP WIFI Phone 1.5.6 lists sensitive information such as software versions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-21T11:00:00.000Z
CVE-2005-3721 
The default configuration of the HTTP server in Hitachi IP5000 VOIP WIFI Phone 1.5.6 does not require authentication for sensitive configuration pages, which allows remote attackers to modify configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-21T11:00:00.000Z
CVE-2005-3722 
The SNMP v1/v2c daemon in Hitachi IP5000 VOIP WIFI Phone 1.5.6 allows remote attackers to gain read or write access to system configuration using arbitrary SNMP credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-21T11:00:00.000Z
CVE-2005-3723 
Hitachi IP5000 VOIP WIFI Phone 1.5.6 does not allow the user to disable access to (1) SNMP or (2) TCP port 3390, which allows remote attackers to modify configuration using CVE-2005-3722, or access the Unidata Shell to obtain sensitive information or cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-21T11:00:00.000Z
CVE-2005-3724 
Zyxel P2000W Version 1 VOIP WIFI Phone Wj.00.10 allows remote attackers to obtain sensitive information and possibly cause a denial of service via a direct connection to UDP port 9090, which is undocumented and does not require authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-21T11:00:00.000Z
CVE-2005-3725 
Zyxel P2000W Version 1 VOIP WIFI Phone Wj.00.10 uses hardcoded IP addresses for its DNS servers, which could allow remote attackers to cause a denial of service or hijack Zyxel phones by attacking or spoofing the hardcoded DNS servers.  NOTE: it could be argued that this issue reflects an inherent limitation of DNS itself, so perhaps it should not be included in CVE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-21T11:00:00.000Z
CVE-2005-3726 
SQL injection vulnerability in Interspire ArticleLive NX 0.3 allows remote attackers to execute arbitrary SQL commands via the Query parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-21T11:00:00.000Z
CVE-2005-3727 
SQL injection vulnerability in debug/query_results.jsp in Idetix Software Systems Revize CMS allows remote attackers to execute arbitrary SQL commands via the query parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-21T11:00:00.000Z
CVE-2005-3728 
Idetix Software Systems Revize CMS stores conf/revize.xml under the web document root with insufficient access control, which allows remote attackers to obtain sensitive configuration information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-21T11:00:00.000Z
CVE-2005-3729 
Idetix Software Systems Revize CMS allows remote attackers to obtain sensitive information via direct requests to files in the revize/debug directory, such as (1) apptables.html and (2) main.html.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-21T11:00:00.000Z
CVE-2005-3730 
Multiple cross-site scripting (XSS) vulnerabilities in HTTPTranslatorServlet in Idetix Software Systems Revize CMS allow remote attackers to inject arbitrary web script or HTML via the (1) resourcetype, (2) objectmap, and (3) redirect parameters, possibly involving setWebSpace.jsp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-21T11:00:00.000Z
CVE-2005-3731 
Unspecified vulnerability in yaSSL before 1.0.6 has unknown impact and attack vectors, related to "certificate chain processing."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-21T11:00:00.000Z
CVE-2005-3732 
The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in racoon in ipsec-tools before 0.6.3, when running in aggressive mode, allows remote attackers to cause a denial of service (null dereference and crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-21T22:00:00.000Z
CVE-2005-3733 
The Internet Key Exchange version 1 (IKEv1) implementation in Juniper JUNOS and JUNOSe software for M, T, and J-series routers before release 6.4, and E-series routers before 7-1-0, allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.  NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-21T23:00:00.000Z
CVE-2005-3734 
Cross-site scripting (XSS) vulnerability in the "add content" page in phpMyFAQ 1.5.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) thema, (2) username, and (3) usermail parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-22T00:00:00.000Z
CVE-2005-3735 
Multiple SQL injection vulnerabilities in e-Quick Cart allow remote attackers to execute arbitrary SQL commands via the (1) productid parameter in shopaddtocart.asp, (2) strpemail parameter in shopprojectlogin.asp, and (3) id parameter in shoptellafriend.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-22T00:00:00.000Z
CVE-2005-3736 
Multiple cross-site scripting (XSS) vulnerabilities in e-Quick Cart allow remote attackers to inject arbitrary web script or HTML via the (1) strgifttoname parameter in shopgift.asp, (2) strfirstname parameter in shopmaillist.asp, (3) strpid parameter in shopprojectlogin.asp, and (4) Custname parameter in shoptellafriend.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-22T00:00:00.000Z
CVE-2005-3737 
Buffer overflow in the SVG importer (style.cpp) of inkscape 0.41 through 0.42.2 might allow remote attackers to execute arbitrary code via a SVG file with long CSS style property values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-22T00:00:00.000Z
CVE-2005-3738 
globals.php in Mambo Site Server 4.0.14 and earlier, when register_globals is disabled, allows remote attackers to overwrite variables in the GLOBALS array and conduct various attacks, as demonstrated using the mosConfig_absolute_path parameter to content.html.php for remote PHP file inclusion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-22T11:00:00.000Z
CVE-2005-3739 
Unspecified vulnerability in subheader.php in PHP-Fusion 6.00.206 and earlier allows remote attackers to obtain the full path via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-22T11:00:00.000Z
CVE-2005-3740 
Multiple SQL injection vulnerabilities in PHP-Fusion 6.00.206 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the forum_id parameter to options.php or (2) lastvisited parameter to viewforum.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-22T11:00:00.000Z
CVE-2005-3741 
Almond Classifieds does not properly verify the password, which allows attackers to bypass access restrictions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-22T11:00:00.000Z
CVE-2005-3742 
Cross-site scripting (XSS) vulnerability in popup.php in Advanced Poll 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the poll_ident parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-22T11:00:00.000Z
CVE-2005-3743 
SQL injection vulnerability in results.php in SimplePoll allows remote attackers to execute arbitrary SQL commands via the pollid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-22T11:00:00.000Z
CVE-2005-3744 
SQL injection vulnerability in index.php in phpComasy 0.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.  NOTE: an examination of the 0.7.5 source code suggests that there is no id parameter being handled directly by index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-22T11:00:00.000Z
CVE-2005-3745 
Cross-site scripting (XSS) vulnerability in Apache Struts 1.2.7, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly quoted or filtered when the request handler generates an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-22T11:00:00.000Z
CVE-2005-3746 
SQL injection vulnerability in thread.php in APBoard allows remote attackers to execute arbitrary SQL commands via the start parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-22T11:00:00.000Z
CVE-2005-3747 
Unspecified vulnerability in Jetty before 5.1.6 allows remote attackers to obtain source code of JSP pages, possibly involving requests for .jsp files with URL-encoded backslash ("%5C") characters.  NOTE: this might be the same issue as CVE-2006-2758.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-22T11:00:00.000Z
CVE-2005-3748 
SQL injection vulnerability in the Search module in Tru-Zone Nuke ET 3.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the query parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-22T11:00:00.000Z
CVE-2005-3749 
Unspecified "absolute path vulnerabilities" in the diagela command (diagela.sh) in IBM AIX 5.2 and 5.3 have unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-22T11:00:00.000Z
CVE-2005-3750 
Opera before 8.51 on Linux and Unix systems allows remote attackers to execute arbitrary code via shell metacharacters (backticks) in a URL that another product provides in a command line argument when launching Opera.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-22T19:00:00.000Z
CVE-2005-3751 
HTTP request smuggling vulnerability in Pound before 1.9.4 allows remote attackers to poison web caches, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with conflicting Content-length and Transfer-encoding headers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-22T20:00:00.000Z
CVE-2005-3752 
Unspecified vulnerability in ldapdiff before 1.1.1 has unknown impact and attack vectors, related to "ldapdiff.conf path construction".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-22T20:00:00.000Z
CVE-2005-3753 
Linux kernel before after 2.6.12 and before 2.6.13.1 might allow attackers to cause a denial of service (Oops) via certain IPSec packets that cause alignment problems in standard multi-block cipher processors.  NOTE: it is not clear whether this issue can be triggered by an attacker.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-22T20:00:00.000Z
CVE-2005-3754 
Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to inject arbitrary Javascript, and possibly other web script or HTML, via the proxystylesheet variable, which will be executed in the resulting error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-22T21:00:00.000Z
CVE-2005-3755 
Directory traversal vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to determine the existence of arbitrary files via a relative path from a style sheet directory, then comparing the resulting error messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-22T21:00:00.000Z
CVE-2005-3756 
Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to port scan arbitrary hosts via URLs with modified targets and ports, then comparing the resulting error messages to determine open and closed ports.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-22T21:00:00.000Z
CVE-2005-3757 
The Saxon XSLT parser in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to obtain sensitive information and execute arbitrary code via dangerous Java class methods in select attribute of xsl:value-of tags in XSLT style sheets, such as (1) system-property, (2) sys:getProperty, and (3) run:exec.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-22T21:00:00.000Z
CVE-2005-3758 
Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to inject arbitrary Javascript, and possibly other web script or HTML, via a proxystylesheet variable that contains a malicious XSLT style sheet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-22T21:00:00.000Z
CVE-2005-3759 
Multiple cross-site scripting (XSS) vulnerabilities in Horde before 3.0.7 allow remote attackers to inject arbitrary web script or HTML via the (1) gzip/tar and (2) css MIME viewers, which do not filter or escape dangerous HTML when extracting and displaying attachments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-22T21:00:00.000Z
CVE-2005-3760 
Double free vulnerability in the BBOORB module in IBM WebSphere Application Server for z/OS 5.0 allows attackers to cause a denial of service (ABEND).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-22T23:00:00.000Z
CVE-2005-3761 
Cross-site scripting (XSS) vulnerability in Exponent CMS 0.96.3 and later versions allows remote attackers to inject arbitrary web script or HTML via (1) Javascript in forms produced by the form generator or (2) the parameters to the installer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-22T23:00:00.000Z
CVE-2005-3762 
SQL injection vulnerability in the navigation module (navigationmodule) in Exponent CMS 0.96.3 and later versions allows remote attackers to execute arbitrary SQL commands via the parent parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-22T23:00:00.000Z
CVE-2005-3763 
Exponent CMS 0.96.3 and later versions includes the full installation path in the base parameter to thumb.php, which allows remote attackers to obtain sensitive information.  NOTE: this might be resultant from an absolute path traversal vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-22T23:00:00.000Z
CVE-2005-3764 
The image gallery (imagegallery) component in Exponent CMS 0.96.3 and later versions does not properly check the MIME type of uploaded files, with unknown impact from the preview icon, possibly involving injection of HTML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-22T23:00:00.000Z
CVE-2005-3765 
Exponent CMS 0.96.3 and later versions performs a chmod on uploaded files to give them execute permissions, which allows remote attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-22T23:00:00.000Z
CVE-2005-3766 
Exponent CMS 0.96.3 and later versions stores sensitive user pages under the web document root with insufficient access control even though certain permissions are specified, which allows attackers to access the pages by browsing uploaded files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-22T23:00:00.000Z
CVE-2005-3767 
Exponent CMS 0.96.3 and later versions does not properly restrict the types of uploaded files, which allows remote attackers to upload and execute PHP files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-22T23:00:00.000Z
CVE-2005-3768 
Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in Symantec Dynamic VPN Services, as used in Enterprise Firewall, Gateway Security, and Firewall /VPN Appliance products, allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-23T00:00:00.000Z
CVE-2005-3769 
SQL injection vulnerability in files.php in PHP Download Manager 1.1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-23T00:00:00.000Z
CVE-2005-3770 
Multiple cross-site scripting (XSS) vulnerabilities in PHP-Post (PHPp) 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the subject in a post, or the user parameter to (2) profile.php and (3) mail.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-23T00:00:00.000Z
CVE-2005-3771 
Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.4 allow remote attackers to inject arbitrary web script or HTML via (1) "GET and other variables" and (2) "SEF".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-23T00:00:00.000Z
CVE-2005-3772 
Multiple SQL injection vulnerabilities in Joomla! before 1.0.4 allow remote attackers to execute arbitrary SQL commands via the (1) Itemid variable in the Polls modules and (2) multiple unspecified methods in the mosDBTable class.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-23T00:00:00.000Z
CVE-2005-3773 
Unspecified vulnerability in Joomla! before 1.0.4 has unknown impact and attack vectors, related to "Potential misuse of Media component file management functions."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-23T00:00:00.000Z
CVE-2005-3774 
Cisco PIX 6.3 and 7.0 allows remote attackers to cause a denial of service (blocked new connections) via spoofed TCP packets that cause the PIX to create embryonic connections that that would not produce a valid connection with the end system, including (1) SYN packets with invalid checksums, which do not result in a RST; or, from an external interface, (2) one byte of "meaningless data," or (3) a TTL that is one less than needed to reach the internal destination.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-23T00:00:00.000Z
CVE-2005-3775 
PHP remote file inclusion vulnerability in pollvote.php in PollVote allows remote attackers to include arbitrary files via a URL in the pollname parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-23T01:00:00.000Z
CVE-2005-3776 
Multiple cross-site scripting (XSS) vulnerabilities in MyBulletinBoard (MyBB) 1.0 PR2 Rev 686 allow remote attackers to inject arbitrary web script or HTML via (1) the subject field when creating a new thread and (2) information passed to the Reputation system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-23T01:00:00.000Z
CVE-2005-3777 
MyBulletinBoard (MyBB) 1.0 PR2 Rev 686 allows remote attackers to delete or move private messages (PM) via modified fields in the inbox form.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-23T01:00:00.000Z
CVE-2005-3778 
Unspecified vulnerability in MyBulletinBoard (MyBB) before 1.0 PR2 Rev 686 allows attackers to cause a denial of service via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-23T01:00:00.000Z
CVE-2005-3779 
Unspecified vulnerability in xterm for HP-UX 11.00, 11.11, and 11.23 allows local users to gain privileges via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-23T01:00:00.000Z
CVE-2005-3780 
Multiple buffer overflows in IPUpdate 1.1 might allow attackers to execute arbitrary code via (1) memmcat in the memm module or (2) certain TSIG format records.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-23T01:00:00.000Z
CVE-2005-3781 
Unspecified vulnerability in in.named in Solaris 9 allows attackers to cause a denial of service via unknown manipulations that cause in.named to "make unnecessary queries."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-23T02:00:00.000Z
CVE-2005-3782 
Mac OS X 10.4.3 up to 10.4.6, when loginwindow uses the "Name and password" setting, and the "Show the Restart, Sleep, and Shut Down buttons" option is disabled, allows users with physical access to bypass login and reboot the system by entering ">restart", ">power", or ">shutdown" sequences after the username.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-19T22:00:00.000Z
CVE-2005-3783 
The ptrace functionality (ptrace.c) in Linux kernel 2.6 before 2.6.14.2, using CLONE_THREAD, does not use the thread group ID to check whether it is attaching to itself, which allows local users to cause a denial of service (crash).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-23T21:00:00.000Z
CVE-2005-3784 
The auto-reap of child processes in Linux kernel 2.6 before 2.6.15 includes processes with ptrace attached, which leads to a dangling ptrace reference and allows local users to cause a denial of service (crash) and gain root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-23T21:00:00.000Z
CVE-2005-3785 
Second-order symlink vulnerability in eix-sync.in in Ebuild IndeX (eix) before 0.5.0_pre2 allows local users to overwrite arbitrary files via a symlink attack on the exi.X.sync temporary file, which is processed by the diff-eix program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-23T23:00:00.000Z
CVE-2005-3786 
Novell ZENworks for Desktops 4.0.1, ZENworks for Servers 3.0.2, and ZENworks 6.5 Desktop Management does not restrict access to Remote Diagnostics, which allows local users to bypass security policies by using Console One.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-23T23:00:00.000Z