CVEs published in May 2003
120 vulnerabilities, 10 critical, 0 exploited.
- oneorzero helpdeskone||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to create administrator...10.0 High
- oneorzero helpdeskSQL injection vulnerability in one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote...5.0 Medium
- apple mac os xIPSec in Mac OS X before 10.2.6 does not properly handle certain incoming security policies that...7.5 High
- redhat tcpdump, linux +1 moretcpdump does not properly drop privileges to the pcap user when starting up.4.6 Medium
- qualcomm eudoraThe IMAP Client for Eudora 5.2.1 allows remote malicious IMAP servers to cause a denial of...5.0 Medium
- microsoft outlook expressThe IMAP Client for Outlook Express 6.00.2800.1106 allows remote malicious IMAP servers to cause...5.0 Medium
- microsoft outlook express, mozilla, mutt +5 more +7 moreThe IMAP Client for Sylpheed 0.8.11 allows remote malicious IMAP servers to cause a denial of...5.0 Medium
- mutt, stuart parmenter balsa +1 moreThe IMAP Client, as used in mutt 1.4.1 and Balsa 2.0.10, allows remote malicious IMAP servers to...7.5 High
- mozillaThe IMAP Client for Mozilla 1.3 and 1.4a allows remote malicious IMAP servers to cause a denial...7.5 High
- university of washington c-client, imap-2002b, pine +2 morec-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers...7.5 High
- ximian evolutionThe IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of...7.5 High
- jelsoft vbulletinCross-site scripting (XSS) vulnerability in private.php for vBulletin 3.0.0 Beta 2 allows remote...6.8 Medium
- php-proximaautohtml.php in php-proxima 6.0 and earlier allows remote attackers to read arbitrary files via...5.0 Medium
- palm palmosPalmOS allows remote attackers to cause a denial of service (CPU consumption) via a flood of ICMP...5.0 Medium
- inktomi traffic-serverCross-site scripting (XSS) vulnerability in Inktomi Traffic-Server 5.5.1 allows remote attackers...6.8 Medium
- 3com 3cp41443com OfficeConnect Remote 812 ADSL Router 1.1.7 does not properly clear memory from DHCP...5.0 Medium
- linux kernelThe ioperm system call in Linux kernel 2.4.20 and earlier does not properly restrict privileges,...3.6 Low
- debian linux, sendmail +1 moreThe Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files,...7.2 High
- lv, redhat linux +1 morelv reads a .lv file from the current working directory, which allows local users to execute...7.2 High
- etype eservMemory leak in eServ 2.9x allows remote attackers to cause a denial of service (memory exhaustion...5.0 Medium
- cdrtools cdrecordFormat string vulnerability in scsiopen.c of the cdrecord program in cdrtools 2.0 allows local...7.2 High
- hiroaki shirouzu ip messengerBuffer overflow in the file & folder transfer mechanism for IP Messenger for Win 2.00 through 2...10.0 High
- six apart movable typeCross-site scripting (XSS) vulnerability in Movable Type before 2.6, and possibly other versions...6.8 Medium
- snitz communications forums 2000SQL injection vulnerability in register.asp in Snitz Forums 2000 before 3.4.03, and possibly 3.4...7.5 High
- ibm aixIBM AIX 5.2 and earlier distributes Sendmail with a configuration file (sendmail.cf) with the (1)...5.0 Medium
- adobe acrobatAdobe Acrobat 5 does not properly validate JavaScript in PDF files, which allows remote attackers...7.5 High
- phorumCross-site scripting (XSS) vulnerability in Phorum before 3.4.3 allows remote attackers to inject...6.8 Medium
- info-zip unzip, sco openlinux server, openlinux workstation +2 moreDirectory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via...2.6 Low
- firebirdsql firebirdBuffer overflow in Firebird 1.0.2 and other versions before 1.5, and possibly other products that...4.6 Medium
- youngzsoft cmailserverMultiple buffer overflows in the SMTP Service for ESMTP CMailServer 4.0.2003.03.27 allow remote...10.0 High
- francisco burzi php-nukeMultiple SQL injection vulnerabilities in the Web_Links module for PHP-Nuke 5.x through 6.5...2.6 Low
- happycgi.com happymallCross-site scripting (XSS) vulnerability in normal_html.cgi in Happycgi.com Happymall 4.3 and 4.4...6.8 Medium
- happycgi happymallDirectory traversal vulnerability in normal_html.cgi in Happycgi.com Happymall 4.3 and 4.4 allows...5.0 Medium
- pi3 pi3webBuffer overflow in Pi3Web 2.0.1 allows remote attackers to cause a denial of service (crash) and...5.0 Medium
- yabbSSI.php in YaBB SE 1.5.2 allows remote attackers to execute arbitrary PHP code by modifying the...5.1 Medium
- apple 802.11nThe administration capability for Apple AirPort 802.11 wireless access point devices uses weak...7.6 High
- neoteris instant virtual extranetCross-site scripting (XSS) vulnerability in Neoteris Instant Virtual Extranet (IVE) 3.01 and...6.8 Medium
- john beatty easy php photo albumCross-site scripting (XSS) vulnerability in John Beatty Easy PHP Photo Album 1.0 allows remote...6.8 Medium
- colten edwards bitchxBitchX IRC client 1.0c20cvs and earlier allows attackers to cause a denial of service (core dump)...2.1 Low
- cren listprocBuffer overflow in catmail for ListProc 8.2.09 and earlier allows remote attackers to execute...10.0 High
- best practical solutions request trackerCross-site scripting (XSS) vulnerability in the web interface for Request Tracker (RT) 1.0...6.8 Medium
- miniportaladmin.php in miniPortail allows remote attackers to gain administrative privileges by setting the...10.0 High
- cooolsoft personal ftp serverBuffer overflow in Personal FTP Server allows remote attackers to execute arbitrary code via a...7.5 High
- kde kopeteThe GnuPG plugin in kopete before 0.6.2 does not properly cleanse the command line when executing...7.5 High
- happycgi happymallHappycgi.com Happymall 4.3 and 4.4 allows remote attackers to execute arbitrary commands via...7.5 High
- youbinBuffer overflow in youbin allows local users to gain privileges via a long HOME environment...7.2 High
- bvrp software slwebmailSLWebMail 3 on Windows systems allows remote attackers to identify the full path of the server...5.0 Medium
- bvrp software slwebmailShowGodLog.dll in SLWebMail 3 on Windows systems allows remote attackers to read arbitrary files...5.0 Medium
- bvrp software slwebmailMultiple buffer overflows in SLWebMail 3 on Windows systems allows remote attackers to cause a...7.5 High
- sap dbRace condition in SDBINST for SAP database 7.3.0.29 creates critical files with world-writable...6.2 Medium
- Show moreLoading…