# CVEs published 2003-05-09

6 CVEs were published on May 9, 2003: 0 critical, 0 high. Days are UTC.

- [CVE-2003-0243](https://cve.now/CVE-2003-0243.md): Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter for (no CVSS)
- [CVE-2003-0256](https://cve.now/CVE-2003-0256.md): The GnuPG plugin in kopete before 0.6.2 does not properly cleanse the command line when executing gpg, which allows remote attackers to exec (no CVSS)
- [CVE-2003-0271](https://cve.now/CVE-2003-0271.md): Buffer overflow in Personal FTP Server allows remote attackers to execute arbitrary code via a long USER argument. (no CVSS)
- [CVE-2003-0272](https://cve.now/CVE-2003-0272.md): admin.php in miniPortail allows remote attackers to gain administrative privileges by setting the miniPortailAdmin cookie to an "adminok" va (no CVSS)
- [CVE-2003-0273](https://cve.now/CVE-2003-0273.md): Cross-site scripting (XSS) vulnerability in the web interface for Request Tracker (RT) 1.0 through 1.0.7 allows remote attackers to execute (no CVSS)
- [CVE-2003-0274](https://cve.now/CVE-2003-0274.md): Buffer overflow in catmail for ListProc 8.2.09 and earlier allows remote attackers to execute arbitrary code via a long ULISTPROC\_UMASK valu (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2003-05-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.