# CVEs published 2003-10-17 9 CVEs were published on October 17, 2003: 0 critical, 0 high. Days are UTC. - [CVE-2003-0659](https://cve.now/CVE-2003-0659.md): Buffer overflow in a function in User32.dll on Windows NT through Server 2003 allows local users to execute arbitrary code via long (1) LB\_D (no CVSS) - [CVE-2003-0660](https://cve.now/CVE-2003-0660.md): The Authenticode capability in Microsoft Windows NT through Server 2003 does not prompt the user to download and install ActiveX controls wh (no CVSS) - [CVE-2003-0662](https://cve.now/CVE-2003-0662.md): Buffer overflow in Troubleshooter ActiveX Control (Tshoot.ocx) in Microsoft Windows 2000 SP4 and earlier allows remote attackers to execute (no CVSS) - [CVE-2003-0711](https://cve.now/CVE-2003-0711.md): Stack-based buffer overflow in the PCHealth system in the Help and Support Center function in Windows XP and Windows Server 2003 allows remo (no CVSS) - [CVE-2003-0712](https://cve.now/CVE-2003-0712.md): Cross-site scripting (XSS) vulnerability in the HTML encoding for the Compose New Message form in Microsoft Exchange Server 5.5 Outlook Web (no CVSS) - [CVE-2003-0714](https://cve.now/CVE-2003-0714.md): The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service (memory exhaustion) (no CVSS) - [CVE-2003-0717](https://cve.now/CVE-2003-0717.md): The Messenger Service for Windows NT through Server 2003 does not properly verify the length of the message, which allows remote attackers t (no CVSS) - [CVE-2003-0865](https://cve.now/CVE-2003-0865.md): Heap-based buffer overflow in readstring of httpget.c for mpg123 0.59r and 0.59s allows remote attackers to execute arbitrary code via a lon (no CVSS) - [CVE-2003-0866](https://cve.now/CVE-2003-0866.md): The Catalina org.apache.catalina.connector.http package in Tomcat 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service via (no CVSS, org.apache.tomcat:tomcat) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2003-10-17 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.