Donnie Werner NetWin Surgemail 1.8/1.9/2.0 / WebMail 3.1 - Login Form Cross-Site Scripting
webapps php CVE-2004-2548;OSVDB-6746

Donnie Werner NetWin Surgemail 1.8/1.9/2.0 / WebMail 3.1 - Error Message Full Path Disclosure
webapps php CVE-2004-2547;OSVDB-6745

Rafel Ivgi The-Insider Microsoft Internet Explorer 6 - URL Local Resource Access
remote windows

qbann targ cPanel 5-9 - Killacct Script Customer Account DNS Information Deletion
webapps php

Cyrillium Security SmartStuff FoolProof Security Program 3.9.x - Administrative Password Recovery
local windows CVE-2004-2555;OSVDB-6735

Luigi Auriemma Colin McRae Rally 2004 - Multiplayer Denial of Service
dos multiple OSVDB-10626

The Warlock [BhQ] Mail Manage EX 3.1.8 MMEX - 'Settings' PHP Remote File Inclusion
webapps php

eEye Digital Security Team IBM EGatherer 2.0 - ActiveX Control Dangerous Method
remote windows

Ziv Kamir Rit Research Labs TinyWeb 1.9.2 - Unauthorized Script Disclosure
webapps cgi CVE-2004-2636;OSVDB-6517

Oliver Karow Sambar Server 6.1 Beta 2 - 'showini.asp' Arbitrary File Access
remote windows CVE-2004-2565;OSVDB-6585

Oliver Karow Sambar Server 6.1 Beta 2 - 'showperf.asp?title' Cross-Site Scripting
remote windows CVE-2004-2564;OSVDB-6584

Oliver Karow Sambar Server 6.1 Beta 2 - 'show.asp?show' Cross-Site Scripting
remote windows CVE-2004-2564;OSVDB-6583

Roman Medina SquirrelMail 1.x - Email Header HTML Injection
remote linux CVE-2004-0520;OSVDB-6514

Jon Hart Linksys - DHCP Information Disclosure
remote hardware CVE-2004-0580;OSVDB-6741

Tim De Gier Land Down Under - BBCode HTML Injection
webapps php CVE-2004-2038;OSVDB-6508

Maciek Wierciski jPORTAL 2.2.1 - 'print.php' SQL Injection
webapps php CVE-2004-2036;OSVDB-6503