CVSS: 8.8EPSS: 2%CPEs: 3EXPL: 0CVE-2005-3618
https://notcve.org/view.php?id=CVE-2005-3618
31 Dec 2005 — Cross-site request forgery (CSRF) vulnerability in the management interface for VMware ESX Server 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3 patch 1, and 2.x before 2.5.3 patch 2 allows allows remote attackers to perform unauthorized actions as the administrator via URLs, as demonstrated using the setUsr operation to change a password. NOTE: this issue can be leveraged with CVE-2005-3619 to automatically perform the attacks. • http://kb.vmware.com/kb/2118366 •
CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0CVE-2005-3620
https://notcve.org/view.php?id=CVE-2005-3620
31 Dec 2005 — The management interface for VMware ESX Server 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3 patch 1, and 2.x before 2.5.3 patch 2 records passwords in cleartext in URLs that are stored in world-readable web server log files, which allows local users to gain privileges. • http://kb.vmware.com/kb/2118366 •
CVSS: 5.5EPSS: 0%CPEs: 9EXPL: 0CVE-2005-4773
https://notcve.org/view.php?id=CVE-2005-4773
31 Dec 2005 — The configuration of VMware ESX Server 2.x, 2.0.x, 2.1.x, and 2.5.x allows local users to cause a denial of service (shutdown) via the (1) halt, (2) poweroff, and (3) reboot scripts executed at the service console. • http://www.osvdb.org/21584 •
CVSS: 8.8EPSS: 1%CPEs: 6EXPL: 1CVE-2005-4583
https://notcve.org/view.php?id=CVE-2005-4583
29 Dec 2005 — Unspecified vulnerability in the Management Interface in VMware ESX Server 2.x up to 2.5.x before 24 December 2005 allows "remote code execution in the Web browser" via unspecified attack vectors, probably related to cross-site scripting (XSS). • http://secunia.com/advisories/18250 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •