# CVEs published 2003-05-02

5 CVEs were published on May 2, 2003: 0 critical, 0 high. Days are UTC.

- [CVE-2003-0115](https://cve.now/CVE-2003-0115.md): Microsoft Internet Explorer 5.01, 5.5 and 6.0 does not properly check parameters that are passed during third party rendering, which could a (no CVSS)
- [CVE-2003-0117](https://cve.now/CVE-2003-0117.md): Buffer overflow in the HTTP receiver function (BizTalkHTTPReceive.dll ISAPI) of Microsoft BizTalk Server 2002 allows attackers to execute ar (no CVSS)
- [CVE-2003-0118](https://cve.now/CVE-2003-0118.md): SQL injection vulnerability in the Document Tracking and Administration (DTA) website of Microsoft BizTalk Server 2000 and 2002 allows remot (no CVSS)
- [CVE-2003-0233](https://cve.now/CVE-2003-0233.md): Heap-based buffer overflow in plugin.ocx for Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code via the L (no CVSS)
- [CVE-2003-0190](https://cve.now/CVE-2003-0190.md): OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2003-05-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.