# CVEs published 2004-05-20

18 CVEs were published on May 20, 2004: 0 critical, 0 high. Days are UTC.

- [CVE-2002-1580](https://cve.now/CVE-2002-1580.md): Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length va (no CVSS)
- [CVE-2003-1041](https://cve.now/CVE-2003-1041.md): Internet Explorer 5.x and 6.0 allows remote attackers to execute arbitrary programs via a modified directory traversal attack using a URL co (no CVSS)
- [CVE-2004-0396](https://cve.now/CVE-2004-0396.md): Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to (no CVSS)
- [CVE-2004-0398](https://cve.now/CVE-2004-0398.md): Heap-based buffer overflow in the ne\_rfc1036\_parse date parsing function for the neon library (libneon) 0.24.5 and earlier, as used by cadav (no CVSS)
- [CVE-2004-0411](https://cve.now/CVE-2004-0411.md): The URI handlers in Konqueror for KDE 3.2.2 and earlier do not properly filter "-" characters that begin a hostname in a (1) telnet, (2) rlo (no CVSS)
- [CVE-2004-0444](https://cve.now/CVE-2004-0444.md): Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 20 (no CVSS)
- [CVE-2004-0445](https://cve.now/CVE-2004-0445.md): The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, N (no CVSS)
- [CVE-2004-0459](https://cve.now/CVE-2004-0459.md): The Clear Channel Assessment (CCA) algorithm in the IEEE 802.11 wireless protocol, when using DSSS transmission encoding, allows remote atta (no CVSS)
- [CVE-2004-0470](https://cve.now/CVE-2004-0470.md): BEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2, when editing weblogic.xml using WebLogic Builder or the Securi (no CVSS)
- [CVE-2004-0471](https://cve.now/CVE-2004-0471.md): BEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2 does not enforce site restrictions for starting and stopping se (no CVSS)
- [CVE-2004-0473](https://cve.now/CVE-2004-0473.md): Argument injection vulnerability in Opera before 7.50 does not properly filter "-" characters that begin a hostname in a telnet URI, which a (no CVSS)
- [CVE-2004-0474](https://cve.now/CVE-2004-0474.md): Help Center (HelpCtr.exe) may allow remote attackers to read or execute arbitrary files via an "http://" or "file://" argument to the topic (no CVSS)
- [CVE-2004-0475](https://cve.now/CVE-2004-0475.md): The showHelp function in Internet Explorer 6 on Windows XP Pro allows remote attackers to execute arbitrary local .CHM files via a double ba (no CVSS)
- [CVE-2004-0478](https://cve.now/CVE-2004-0478.md): Unknown versions of Mozilla allow remote attackers to cause a denial of service (high CPU/RAM consumption) using Javascript with an infinite (no CVSS)
- [CVE-2004-0479](https://cve.now/CVE-2004-0479.md): Internet Explorer 6 allows remote attackers to cause a denial of service (crash) via Javascript that creates a new popup window and disables (no CVSS)
- [CVE-2004-0482](https://cve.now/CVE-2004-0482.md): Multiple integer overflows in (1) procfs\_cmdline.c, (2) procfs\_fpregs.c, (3) procfs\_linux.c, (4) procfs\_regs.c, (5) procfs\_status.c, and (6) (no CVSS)
- [CVE-2004-0483](https://cve.now/CVE-2004-0483.md): Unknown vulnerability in rpc.mountd for SGI IRIX 6.5.24 allows remote attackers to cause a denial of service (infinite loop) via certain RPC (no CVSS)
- [CVE-2004-0484](https://cve.now/CVE-2004-0484.md): mshtml.dll in Microsoft Internet Explorer 6.0.2800 allows remote attackers to cause a denial of service (crash) via a table containing a for (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2004-05-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.