CVE Tools
Track your stack

May 2005

861 CVEs published, +66% on April 2005 and 16.2× May 2004. CISA added 0 to KEV.

2005 month by month

2005, month by month. Point at another month to read it.
2005: CVEs published per month
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2005January 2005: 175 CVEsFebruary 2005: 827 CVEsMarch 2005: 506 CVEsApril 2005: 518 CVEsMay 2005: 861 CVEsJune 2005: 661 CVEsJuly 2005: 593 CVEsAugust 2005: 584 CVEsSeptember 2005: 316 CVEsOctober 2005: 353 CVEsNovember 2005: 716 CVEsDecember 2005: 693 CVEs6,803+318%
Critical
314% of the 856 with a CVSS score
Added to CISA KEV
0None of this month's own CVEs is in KEV yet
Vendors
432643 products
Top weakness
Improper Input ValidationCWE-20 · 9 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

  1. 1AppleMac OS X, Mac OS X Server, Terminal280nonenew
  2. 2Francisco BurziPhp-nuke250nonenew
  3. 3OracleWeblogic Portal, Application Server, Oracle9i201nonenew
  4. 4Ethereal GroupEthereal150nonenew
  5. 5Postnuke Software FoundationPostnuke, Postcalendar110nonenew
  6. 6BeaWeblogic Server, Tuxedo101nonenew
  7. 7MicrosoftInternet Explorer, Asp.net, Windows 2003 Server100nonenew
  8. 8Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux101nonenew
  9. 9GnuMailutils, Gdb, Wget90nonenew
  10. 10MozillaFirefox, Bugzilla, Mozilla90nonenew
  11. 11Phpbb GroupPhpbb90nonenew
  12. 12SunSunos, Solaris, Jre80nonenew
  13. 13IpswitchImail, Imail Server, Ipswitch Collaboration Suite72nonenew
  14. 14LinuxLinux Kernel70nonenew
  15. 15CoppermineCoppermine Photo Gallery60nonenew
  16. 16E107E10760nonenew
  17. 17HPWeb Jetadmin, Openview Network Node Manager, Openview Radia Management Portal60nonenew
  18. 18NovellNetware, Zenworks Desktops, Zenworks Remote Management60nonenew
  19. 19S9YSerendipity62nonenew
  20. 20TikiTikiwiki Cms\/groupware60nonenew
  21. 21DebianDebian Linux, Qpopper, Ppxp51nonenew
  22. 22EsesixThintune Xs, Thintune Extreme, Thintune L51nonenew
  23. 23Invision Power ServicesInvision Board, Invision Power Board, Invision Gallery50nonenew
  24. 24MamboMambo Open Source, Mambo Site Server, Mambo Open Source 4.550nonenew
  25. 25MaxwebportalMaxwebportal50nonenew

Severity

How this month's CVEs score on CVSS; 5 have no score yet. Severity is not exploitation.

  • Critical314%
  • High29835%
  • Medium47455%
  • Low536%

Breakouts

Vendors with at least three times their own 12-month median.

  1. Oracle2020.0×
  2. Sun88.0×
  3. Apple287.0×
  4. Ipswitch77.0×
  5. Phpbb Group96.0×
  6. Francisco Burzi255.0×
  7. Bea105.0×
  8. Progress44.0×
  9. Freebsd44.0×
  10. Gnu93.6×

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. Postnuke Software Foundation11#5
  2. Coppermine6#15
  3. E1076#16
  4. S9Y6#19
  5. Tiki6#20
  6. Esesix5#22
  7. Mambo5#24
  8. Openbb5#26
  9. Open Solution5#27
  10. Pwsphp5#28

What kind of weakness

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

  1. CWE-20Improper Input Validation9new
  2. CWE-79XSS9+17
  3. CWE-4256new
  4. CWE-119Memory Buffer Bounds5−3
  5. CWE-352CSRF4new
  6. CWE-2643+5
  7. CWE-89SQL Injection3+13
  8. CWE-190Integer Overflow2+1
  9. CWE-2032new
  10. CWE-22Path Traversal2new
  11. CWE-125Out-of-bounds Read1new
  12. CWE-134Format String1−5
  13. CWE-1891new
  14. CWE-200Information Exposure1−4
  15. CWE-276Incorrect Default Permissions1new
  16. CWE-319Cleartext Transmission1new
  17. CWE-3991−13
  18. CWE-400Resource Consumption1new
  19. CWE-4591new
  20. CWE-591−4

Where it landed

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

Which weakness, where

The top weakness classes against the vendors and the sectors that carried them.

Snapshot v1, computed Jun 11, 2026, 06:04 UTC. MethodologyAll months on record

Nuclei coverage and the detection gap are held back while the template mirror is repaired.

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store