Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: May 2001

13 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • The password protection option for the Compressed Folders feature in Plus! for Windows 98 and Windows Me writes password information to a fi

    LowCVSS 2.1WeaponizedEPSS 8%

    microsoft · plusMay 3, 2001

  • CVE-2001-0153
    34Monitor

    Buffer overflow in VB-TSQL debugger object (vbsdicli.exe) in Visual Studio 6.0 Enterprise Edition allows remote attackers to execute arbitra

    HighCVSS 7.5No exploitEPSS 12%

    microsoft · visual basicMay 3, 2001

  • CVE-2001-0154
    33Monitor

    HTML e-mail feature in Internet Explorer 5.5 and earlier allows attackers to execute attachments by setting an unusual MIME type for the att

    HighCVSS 7.5No exploitEPSS 11%

    microsoft · internet explorerMay 3, 2001

  • Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands

    HighCVSS 7.6WeaponizedEPSS 50%

    att · winvncMay 3, 2001

  • CVE-2001-0168
    61This week

    Buffer overflow in AT&T WinVNC (Virtual Network Computing) server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands

    CriticalCVSS 10.0WeaponizedEPSS 70%

    att · winvncMay 3, 2001

  • Buffer overflow in SlimServe HTTPd 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a

    CriticalCVSS 10.0Proof of conceptEPSS 12%

    whitsoft · slimserveMay 3, 2001

  • CVE-2001-0199
    23Monitor

    Directory traversal vulnerability in SEDUM HTTP Server 2.0 allows remote attackers to read arbitrary files via a ..

    MediumCVSS 5.0Proof of conceptEPSS 10%

    guido frassetto · sedumMay 3, 2001

  • CVE-2001-0205
    27Monitor

    Directory traversal vulnerability in AOLserver 3.2 and earlier allows remote attackers to read arbitrary files by inserting "..." into the r

    MediumCVSS 5.0Proof of conceptEPSS 23%

    aol · aol serverMay 3, 2001

  • CVE-2001-0236
    62This week

    Buffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands via a long "indication"

    CriticalCVSS 10.0Proof of conceptEPSS 72%

    sun · solarisMay 3, 2001

  • Buffer overflow in ext.dll in BadBlue 1.02.07 Personal Edition allows remote attackers to cause a denial of service and possibly execute arb

    CriticalCVSS 10.0Proof of conceptEPSS 10%

    working resources inc. · badblueMay 3, 2001

  • Buffer overflow in MERCUR SMTP server 3.30 allows remote attackers to execute arbitrary commands via a long EXPN command.

    CriticalCVSS 10.0Proof of conceptEPSS 12%

    atrium software · mercurMay 3, 2001

  • CVE-2001-0324
    14Monitor

    Windows 98 and Windows 2000 Java clients allow remote attackers to cause a denial of service via a Java applet that opens a large number of

    LowCVSS 2.6Proof of conceptEPSS 14%

    microsoft · windows 2000May 3, 2001

  • CVE-2001-1342
    29Monitor

    Apache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of service (GPF) via an HTTP request for a URI th

    MediumCVSS 5.0No exploitEPSS 30%

    apache · http serverMay 12, 2001