# CVEs published 2000-06-15 18 CVEs were published on June 15, 2000: 0 critical, 0 high. Days are UTC. - [CVE-2000-0383](https://cve.now/CVE-2000-0383.md): The file transfer component of AOL Instant Messenger (AIM) reveals the physical path of the transferred file to the remote recipient. (no CVSS) - [CVE-2000-0384](https://cve.now/CVE-2000-0384.md): NetStructure 7110 and 7180 have undocumented accounts (servnow, root, and wizard) whose passwords are easily guessable from the NetStructure (no CVSS) - [CVE-2000-0385](https://cve.now/CVE-2000-0385.md): FileMaker Pro 5 Web Companion allows remote attackers to bypass Field-Level database security restrictions via the XML publishing or email c (no CVSS) - [CVE-2000-0386](https://cve.now/CVE-2000-0386.md): FileMaker Pro 5 Web Companion allows remote attackers to send anonymous or forged email. (no CVSS) - [CVE-2000-0400](https://cve.now/CVE-2000-0400.md): The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded, which allows an atta (no CVSS) - [CVE-2000-0401](https://cve.now/CVE-2000-0401.md): Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary commands via a long q (no CVSS) - [CVE-2000-0412](https://cve.now/CVE-2000-0412.md): The gnapster and knapster clients for Napster do not properly restrict access only to MP3 files, which allows remote attackers to read arbit (no CVSS) - [CVE-2000-0413](https://cve.now/CVE-2000-0413.md): The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML, (no CVSS) - [CVE-2000-0415](https://cve.now/CVE-2000-0415.md): Buffer overflow in Outlook Express 4.x allows attackers to cause a denial of service via a mail or news message that has a .jpg or .bmp atta (no CVSS) - [CVE-2000-0420](https://cve.now/CVE-2000-0420.md): The default configuration of SYSKEY in Windows 2000 stores the startup key in the registry, which could allow an attacker tor ecover it and (no CVSS) - [CVE-2000-0422](https://cve.now/CVE-2000-0422.md): Buffer overflow in Netwin DMailWeb CGI program allows remote attackers to execute arbitrary commands via a long utoken parameter. (no CVSS) - [CVE-2000-0423](https://cve.now/CVE-2000-0423.md): Buffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands via long parameters such as group, cmd, (no CVSS) - [CVE-2000-0429](https://cve.now/CVE-2000-0429.md): A backdoor password in Cart32 3.0 and earlier allows remote attackers to execute arbitrary commands. (no CVSS) - [CVE-2000-0433](https://cve.now/CVE-2000-0433.md): The SuSE aaa\_base package installs some system accounts with home directories set to /tmp, which allows local users to gain privileges to th (no CVSS) - [CVE-2000-0434](https://cve.now/CVE-2000-0434.md): The administrative password for the Allmanage web site administration software is stored in plaintext in a file which could be accessed by r (no CVSS) - [CVE-2000-0444](https://cve.now/CVE-2000-0444.md): HP Web JetAdmin 6.0 allows remote attackers to cause a denial of service via a malformed URL to port 8000. (no CVSS) - [CVE-2000-0449](https://cve.now/CVE-2000-0449.md): Omnis Studio 2.4 uses weak encryption (trivial encoding) for encrypting database fields. (no CVSS) - [CVE-2000-0450](https://cve.now/CVE-2000-0450.md): Vulnerability in bbd server in Big Brother System and Network Monitor allows an attacker to execute arbitrary commands. (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2000-06-15 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.