Multiple unspecified vulnerabilities in Oracle Application Express (formerly Oracle HTML DB) 1.5 up to 2.0 have unknown impact and remote attack vectors aka Vuln# (1) APEX01 (2) APEX02 (3) APEX03 (4) APEX05 (5) APEX06 (6) APEX07 (7) APEX08 (8) APEX09 (9) APEX10 (10) APEX11 (11) APEX12 (12) APEX13 (13) APEX14 (14) APEX15 (15) APEX16 (16) APEX17 (17) APEX18 (18) APEX19 (19) APEX22 (20) APEX23 (21) APEX24 (22) APEX25 (23) APEX26 (24) APEX27 (25) APEX28 (26) APEX29 (27) APEX30 (28) APEX31 (29) APEX32 (30) APEX33 (31) APEX34 and (32) APEX35. NOTE: as of 20061027 it is likely that some of these identifiers are associated with cross-site scripting (XSS) in WWV_FLOW_ITEM_HELP and NOTIFICATION_MSG but these have been provided separate identifiers.