# CVEs published 2003-05-14

18 CVEs were published on May 14, 2003: 0 critical, 0 high. Days are UTC.

- [CVE-2003-0217](https://cve.now/CVE-2003-0217.md): Cross-site scripting (XSS) vulnerability in Neoteris Instant Virtual Extranet (IVE) 3.01 and earlier allows remote attackers to insert… (no CVSS)
- [CVE-2003-0270](https://cve.now/CVE-2003-0270.md): The administration capability for Apple AirPort 802.11 wireless access point devices uses weak encryption (XOR with a fixed key) for… (no CVSS)
- [CVE-2003-0275](https://cve.now/CVE-2003-0275.md): SSI.php in YaBB SE 1.5.2 allows remote attackers to execute arbitrary PHP code by modifying the sourcedir parameter to reference a URL on… (no CVSS)
- [CVE-2003-0276](https://cve.now/CVE-2003-0276.md): Buffer overflow in Pi3Web 2.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a GET… (no CVSS)
- [CVE-2003-0277](https://cve.now/CVE-2003-0277.md): Directory traversal vulnerability in normal\_html.cgi in Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to read arbitrary files… (no CVSS)
- [CVE-2003-0278](https://cve.now/CVE-2003-0278.md): Cross-site scripting (XSS) vulnerability in normal\_html.cgi in Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to insert… (no CVSS)
- [CVE-2003-0279](https://cve.now/CVE-2003-0279.md): Multiple SQL injection vulnerabilities in the Web\_Links module for PHP-Nuke 5.x through 6.5 allows remote attackers to steal sensitive… (no CVSS)
- [CVE-2003-0280](https://cve.now/CVE-2003-0280.md): Multiple buffer overflows in the SMTP Service for ESMTP CMailServer 4.0.2003.03.27 allow remote attackers to execute arbitrary code via… (no CVSS)
- [CVE-2003-0281](https://cve.now/CVE-2003-0281.md): Buffer overflow in Firebird 1.0.2 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows local… (no CVSS)
- [CVE-2003-0282](https://cve.now/CVE-2003-0282.md): Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid characters between two . (no CVSS)
- [CVE-2003-0283](https://cve.now/CVE-2003-0283.md): Cross-site scripting (XSS) vulnerability in Phorum before 3.4.3 allows remote attackers to inject arbitrary web script and HTML tags via a… (no CVSS)
- [CVE-2003-0284](https://cve.now/CVE-2003-0284.md): Adobe Acrobat 5 does not properly validate JavaScript in PDF files, which allows remote attackers to write arbitrary files into the… (no CVSS)
- [CVE-2003-0285](https://cve.now/CVE-2003-0285.md): IBM AIX 5.2 and earlier distributes Sendmail with a configuration file (sendmail.cf) with the (1) promiscuous\_relay, (2)… (no CVSS)
- [CVE-2003-0286](https://cve.now/CVE-2003-0286.md): SQL injection vulnerability in register.asp in Snitz Forums 2000 before 3.4.03, and possibly 3.4.07 and earlier, allows remote attackers… (no CVSS)
- [CVE-2003-0287](https://cve.now/CVE-2003-0287.md): Cross-site scripting (XSS) vulnerability in Movable Type before 2.6, and possibly other versions including 2.63, allows remote attackers… (no CVSS)
- [CVE-2003-0288](https://cve.now/CVE-2003-0288.md): Buffer overflow in the file & folder transfer mechanism for IP Messenger for Win 2.00 through 2.02 allows remote attackers to execute… (no CVSS)
- [CVE-2003-0289](https://cve.now/CVE-2003-0289.md): Format string vulnerability in scsiopen.c of the cdrecord program in cdrtools 2.0 allows local users to gain privileges via format string… (no CVSS)
- [CVE-2003-0290](https://cve.now/CVE-2003-0290.md): Memory leak in eServ 2.9x allows remote attackers to cause a denial of service (memory exhaustion) via a large number of connections… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2003-05-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.