# CVEs published 2004-11-16

6 CVEs were published on November 16, 2004: 0 critical, 0 high. Days are UTC.

- [CVE-2004-0892](https://cve.now/CVE-2004-0892.md): Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business Server 2000 and Small Business Server 2003 Pre (no CVSS)
- [CVE-2004-1027](https://cve.now/CVE-2004-1027.md): Directory traversal vulnerability in the -x (extract) command line option in unarj allows remote attackers to overwrite arbitrary files via (no CVSS)
- [CVE-2004-1034](https://cve.now/CVE-2004-1034.md): Buffer overflow in the http\_open function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to (no CVSS)
- [CVE-2004-1035](https://cve.now/CVE-2004-1035.md): Multiple integer signedness errors in (1) imapcommon.c, (2) main.c, (3) request.c, and (4) select.c for up-imapproxy IMAP proxy 1.2.2 allow (no CVSS)
- [CVE-2004-1036](https://cve.now/CVE-2004-1036.md): Cross-site scripting (XSS) vulnerability in the decoding of encoded text in certain headers in mime.php for SquirrelMail 1.4.3a and earlier, (no CVSS)
- [CVE-2004-1038](https://cve.now/CVE-2004-1038.md): A design error in the IEEE1394 specification allows attackers with physical access to a device to read and write to sensitive memory using a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2004-11-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.
