# CVEs published 2004-01-08 10 CVEs were published on January 8, 2004: 0 critical, 0 high. Days are UTC. - [CVE-2003-0696](https://cve.now/CVE-2003-0696.md): The getipnodebyname() API in AIX 5.1 and 5.2 does not properly close sockets, which allows attackers to cause a denial of service (resource (no CVSS) - [CVE-2003-0904](https://cve.now/CVE-2003-0904.md): Microsoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication, does not properly reuse HTTP connections, (no CVSS) - [CVE-2003-1026](https://cve.now/CVE-2003-1026.md): Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, which (no CVSS) - [CVE-2003-1027](https://cve.now/CVE-2003-1027.md): Internet Explorer 5.01 through 6 SP1 allows remote attackers to direct drag and drop behaviors and other mouse click actions to other window (no CVSS) - [CVE-2003-1028](https://cve.now/CVE-2003-1028.md): The download function of Internet Explorer 6 SP1 allows remote attackers to obtain the cache directory name via an HTTP response with an inv (no CVSS) - [CVE-2004-0014](https://cve.now/CVE-2004-0014.md): Multiple buffer overflows in the nd WebDAV interface 0.8.2 and earlier allows remote web servers to execute arbitrary code via certain long (no CVSS) - [CVE-2004-0029](https://cve.now/CVE-2004-0029.md): Lotus Notes Domino 6.0.2 on Linux installs the notes.ini configuration file with world-writable permissions, which allows local users to mod (no CVSS) - [CVE-2004-0030](https://cve.now/CVE-2004-0030.md): PHP remote file inclusion vulnerability in (1) functions.php, (2) authentication\_index.php, and (3) config\_gedcom.php for PHPGEDVIEW 2.61 al (no CVSS) - [CVE-2004-0034](https://cve.now/CVE-2004-0034.md): Multiple cross-site scripting (XSS) vulnerabilities in Phorum 3.4.5 and earlier allow remote attackers to inject arbitrary HTML or web scrip (no CVSS) - [CVE-2004-0037](https://cve.now/CVE-2004-0037.md): FirstClass Desktop Client 7.1 allows remote attackers to execute arbitrary commands via hyperlinks in FirstClass RTF messages. (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2004-01-08 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.