CVE-2005-2741
Product allows users to grant themselves certain rights that can be used to escalate privileges.
CVE-2005-2496
Product uses group ID of a user instead of the group, causing it to run with different privileges. This is resultant from some other unknown issue.