# CVEs published 2003-03-21

13 CVEs were published on March 21, 2003: 0 critical, 0 high. Days are UTC.

- [CVE-2003-0010](https://cve.now/CVE-2003-0010.md): Integer overflow in JsArrayFunctionHeapSort function used by Windows Script Engine for JScript (JScript.dll) on various Windows operating sy (no CVSS)
- [CVE-2003-0011](https://cve.now/CVE-2003-0011.md): Unknown vulnerability in the DNS intrusion detection application filter for Microsoft Internet Security and Acceleration (ISA) Server 2000 a (no CVSS)
- [CVE-2003-0028](https://cve.now/CVE-2003-0028.md): Integer overflow in the xdrmem\_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived fr (no CVSS)
- [CVE-2003-0128](https://cve.now/CVE-2003-0128.md): The try\_uudecoding function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier allows remote attackers to cause a denia (no CVSS)
- [CVE-2003-0129](https://cve.now/CVE-2003-0129.md): Ximian Evolution Mail User Agent 1.2.2 and earlier allows remote attackers to cause a denial of service (memory consumption) via a mail mess (no CVSS)
- [CVE-2003-0130](https://cve.now/CVE-2003-0130.md): The handle\_image function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier does not properly escape HTML characters, (no CVSS)
- [CVE-2003-0131](https://cve.now/CVE-2003-0131.md): The SSL and TLS components for OpenSSL 0.9.6i and earlier, 0.9.7, and 0.9.7a allow remote attackers to perform an unauthorized RSA private k (no CVSS)
- [CVE-2003-0138](https://cve.now/CVE-2003-0138.md): Version 4 of the Kerberos protocol (krb4), as used in Heimdal and other packages, allows an attacker to impersonate any principal in a realm (no CVSS)
- [CVE-2003-0139](https://cve.now/CVE-2003-0139.md): Certain weaknesses in the implementation of version 4 of the Kerberos protocol (krb4) in the krb5 distribution, when triple-DES keys are use (no CVSS)
- [CVE-2003-0140](https://cve.now/CVE-2003-0140.md): Buffer overflow in Mutt 1.4.0 and possibly earlier versions, 1.5.x up to 1.5.3, and other programs that use Mutt code such as Balsa before 2 (no CVSS)
- [CVE-2003-0150](https://cve.now/CVE-2003-0150.md): MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT \* INFO OUTFILE" (no CVSS)
- [CVE-2003-0151](https://cve.now/CVE-2003-0151.md): BEA WebLogic Server and Express 6.0 through 7.0 does not properly restrict access to certain internal servlets that perform administrative f (no CVSS)
- [CVE-2003-0156](https://cve.now/CVE-2003-0156.md): Directory traversal vulnerability in Cross-Referencing Linux (LXR) allows remote attackers to read arbitrary files via .. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2003-03-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.