Thor Larholm CPaint 1.3 - xmlhttp Request Input Validation
webapps asp

John Cobb Soft4e ECW-Shop 6.0.2 - 'index.php' SQL Injection
webapps php

trueend5 PersianBlog - 'Userslist.asp' SQL Injection
webapps asp

anonymous My Image Gallery 1.4.1 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
webapps php CVE-2005-2603;OSVDB-18741

Charles Stevenson Operator Shell (osh) 1.7-13 - Local Privilege Escalation
local linux OSVDB-21576;CVE-2005-3533

Neil Archibald Apple Mac OSX 10.4 - dsidentity Directory Services Account Creation and Deletion
local osx CVE-2005-2508;OSVDB-18781

Donnie Werner Apple Mac OSX 10.4 Weblog Server - Cross-Site Scripting
remote osx CVE-2005-2523;OSVDB-18793

Tacettin Karadeniz Isemarket JaguarControl - ActiveX Control Buffer Overflow
remote windows CVE-2005-2644;OSVDB-18773

phuket MyBulletinBoard (MyBB) RC4 - 'action' SQL Injection
webapps php CVE-2005-2580;OSVDB-19033

phuket MyBulletinBoard (MyBB) RC4 - 'polloptions' SQL Injection
webapps php CVE-2005-2580;OSVDB-19032

phuket MyBulletinBoard (MyBB) RC4 - 'member.php' Multiple SQL Injections
webapps php CVE-2005-2580;OSVDB-19031

phuket MyBulletinBoard (MyBB) RC4 - 'Username' SQL Injection
webapps php CVE-2005-2580;OSVDB-19030

Pierre Kroma Grandstream Budge Tone 101/102 VOIP Phone - Denial of Service
dos hardware OSVDB-18731;CVE-2005-2581

Metasploit Novell eDirectory 8.7.3 - iMonitor Remote Stack Overflow (Metasploit)
remote windows 8008 OSVDB-18703;CVE-2005-2551

Metasploit MDaemon 8.0.3 - IMAPD CRAM-MD5 Authentication Overflow (Metasploit)
remote windows 143 OSVDB-11838;CVE-2004-1520

Metasploit Novell ZENworks 6.5 - Desktop/Server Management Remote Stack Overflow (Metasploit)
remote windows 1761 OSVDB-16698;CVE-2005-1543