# CVEs published 2003-05-22

14 CVEs were published on May 22, 2003: 0 critical, 0 high. Days are UTC.

- [CVE-2003-0318](https://cve.now/CVE-2003-0318.md): Cross-site scripting (XSS) vulnerability in the Statistics module for PHP-Nuke 6.0 and earlier allows remote attackers to insert arbitrary w (no CVSS)
- [CVE-2003-0319](https://cve.now/CVE-2003-0319.md): Buffer overflow in the IMAP server (IMAPMax) for SmartMax MailMax 5.0.10.8 and earlier allows remote authenticated users to execute arbitrar (no CVSS)
- [CVE-2003-0320](https://cve.now/CVE-2003-0320.md): header.php in ttCMS 2.3 and earlier allows remote attackers to inject arbitrary PHP code by setting the ttcms\_user\_admin parameter to "1" an (no CVSS)
- [CVE-2003-0321](https://cve.now/CVE-2003-0321.md): Multiple buffer overflows in BitchX IRC client 1.0-0c19 and earlier allow remote malicious IRC servers to cause a denial of service (crash) (no CVSS)
- [CVE-2003-0322](https://cve.now/CVE-2003-0322.md): Integer overflow in BitchX IRC client 1.0-0c19 and earlier allows remote malicious IRC servers to cause a denial of service (crash). (no CVSS)
- [CVE-2003-0323](https://cve.now/CVE-2003-0323.md): Multiple buffer overflows in ircII 20020912 allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute ar (no CVSS)
- [CVE-2003-0324](https://cve.now/CVE-2003-0324.md): Buffer overflows in EPIC IRC Client (EPIC4) 1.0.1 allows remote malicious IRC servers to cause a denial of service (crash) and possibly exec (no CVSS)
- [CVE-2003-0325](https://cve.now/CVE-2003-0325.md): Buffer overflow in Maelstrom 3.0.6, 3.0.5, and earlier allows local users to execute arbitrary code via a long -server command line argument (no CVSS)
- [CVE-2003-0326](https://cve.now/CVE-2003-0326.md): Integer overflow in parse\_decode\_path() of slocate may allow attackers to execute arbitrary code via a LOCATE\_PATH with a large number of ": (no CVSS)
- [CVE-2003-0328](https://cve.now/CVE-2003-0328.md): EPIC IRC Client (EPIC4) pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a denial of service (c (no CVSS)
- [CVE-2003-0329](https://cve.now/CVE-2003-0329.md): CesarFTP 0.99g stores user names and passwords in plaintext in the settings.ini file, which could allow local users to gain privileges. (no CVSS)
- [CVE-2003-0330](https://cve.now/CVE-2003-0330.md): Buffer overflow in unknown versions of Maelstrom allows local users to execute arbitrary code via a long -player command line argument. (no CVSS)
- [CVE-2003-0331](https://cve.now/CVE-2003-0331.md): SQL injection vulnerability in ttForum allows remote attackers to execute arbitrary SQL and gain ttForum Administrator privileges via the Ig (no CVSS)
- [CVE-2003-0332](https://cve.now/CVE-2003-0332.md): The ISAPI extension in BadBlue 1.7 through 2.2, and possibly earlier versions, modifies the first two letters of a filename extension after (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2003-05-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.