https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2005-4700.htmlhttps://patchthecve.com/cve/CVE-2005-4700.htmlTue, 16 Jun 2026 22:19:16 +0000MEDIUM 5.0: TellMe 1.2 and earlier, when the Server (o_Server) and HEAD (o_Head) options are enabled, allows remote attackers to obtain sensitive information via an invalid q_Host parameter, which reveals the full pathname of the application in an fsockopen error message.https://patchthecve.com/cve/CVE-2005-4699.htmlhttps://patchthecve.com/cve/CVE-2005-4699.htmlTue, 16 Jun 2026 22:19:16 +0000MEDIUM 6.4: Argument injection vulnerability in TellMe 1.2 and earlier allows remote attackers to modify command line arguments for the Whois program and obtain sensitive information via "--" style options in the q_Host parameter.https://patchthecve.com/cve/CVE-2005-4698.htmlhttps://patchthecve.com/cve/CVE-2005-4698.htmlTue, 16 Jun 2026 22:19:15 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in TellMe 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the 91) q_IP (IP) or (2) q_Host (HOST) parameters.