# CVEs published 2003-05-15

13 CVEs were published on May 15, 2003: 0 critical, 0 high. Days are UTC.

- [CVE-2003-0246](https://cve.now/CVE-2003-0246.md): The ioperm system call in Linux kernel 2.4.20 and earlier does not properly restrict privileges, which allows local users to gain read or wr (no CVSS)
- [CVE-2003-0291](https://cve.now/CVE-2003-0291.md): 3com OfficeConnect Remote 812 ADSL Router 1.1.7 does not properly clear memory from DHCP responses, which allows remote attackers to identif (no CVSS)
- [CVE-2003-0292](https://cve.now/CVE-2003-0292.md): Cross-site scripting (XSS) vulnerability in Inktomi Traffic-Server 5.5.1 allows remote attackers to insert arbitrary web script or HTML into (no CVSS)
- [CVE-2003-0293](https://cve.now/CVE-2003-0293.md): PalmOS allows remote attackers to cause a denial of service (CPU consumption) via a flood of ICMP echo request (ping) packets. (no CVSS)
- [CVE-2003-0294](https://cve.now/CVE-2003-0294.md): autohtml.php in php-proxima 6.0 and earlier allows remote attackers to read arbitrary files via the name parameter in a modload operation. (no CVSS)
- [CVE-2003-0295](https://cve.now/CVE-2003-0295.md): Cross-site scripting (XSS) vulnerability in private.php for vBulletin 3.0.0 Beta 2 allows remote attackers to inject arbitrary web script an (no CVSS)
- [CVE-2003-0296](https://cve.now/CVE-2003-0296.md): The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code vi (no CVSS)
- [CVE-2003-0297](https://cve.now/CVE-2003-0297.md): c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service (crash) and pos (no CVSS)
- [CVE-2003-0298](https://cve.now/CVE-2003-0298.md): The IMAP Client for Mozilla 1.3 and 1.4a allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary co (no CVSS)
- [CVE-2003-0299](https://cve.now/CVE-2003-0299.md): The IMAP Client, as used in mutt 1.4.1 and Balsa 2.0.10, allows remote malicious IMAP servers to cause a denial of service and possibly exec (no CVSS)
- [CVE-2003-0300](https://cve.now/CVE-2003-0300.md): The IMAP Client for Sylpheed 0.8.11 allows remote malicious IMAP servers to cause a denial of service (crash) via certain large literal size (no CVSS)
- [CVE-2003-0301](https://cve.now/CVE-2003-0301.md): The IMAP Client for Outlook Express 6.00.2800.1106 allows remote malicious IMAP servers to cause a denial of service (crash) via certain lar (no CVSS)
- [CVE-2003-0302](https://cve.now/CVE-2003-0302.md): The IMAP Client for Eudora 5.2.1 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via c (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2003-05-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.