Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: May 2003

17 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2003-0110
    25Monitor

    The Winsock Proxy service in Microsoft Proxy Server 2.0 and the Microsoft Firewall service in Internet Security and Acceleration (ISA) Serve

    MediumCVSS 5.0No exploitEPSS 17%

    microsoft · isa serverMay 5, 2003

  • CVE-2003-0111
    41Plan

    The ByteCode Verifier component of Microsoft Virtual Machine (VM) build 5.0.3809 and earlier, as used in Windows and Internet Explorer, allo

    HighCVSS 7.5Proof of conceptEPSS 35%

    microsoft · virtual machineMay 5, 2003

  • CVE-2003-0196
    47Plan

    Multiple buffer overflows in Samba before 2.2.8a may allow remote attackers to execute arbitrary code or cause a denial of service, as disco

    CriticalCVSS 10.0No exploitEPSS 22%

    samba · sambaMay 5, 2003

  • CVE-2003-0201
    65This week

    Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG

    CriticalCVSS 10.0WeaponizedEPSS 84%

    samba · sambaMay 5, 2003

  • CVE-2003-0209
    52Plan

    Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows remote attackers to execute arbitrary code v

    CriticalCVSS 10.0Proof of conceptEPSS 38%

    smoothwall · smoothwallMay 5, 2003

  • CVE-2003-0113
    42Plan

    Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code via an HTTP

    HighCVSS 7.5Proof of conceptEPSS 39%

    microsoft · ieMay 12, 2003

  • CVE-2003-0114
    24Monitor

    The file upload control in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to automatically upload files from the loc

    MediumCVSS 5.0No exploitEPSS 14%

    microsoft · ieMay 12, 2003

  • CVE-2003-0115
    33Monitor

    Microsoft Internet Explorer 5.01, 5.5 and 6.0 does not properly check parameters that are passed during third party rendering, which could a

    HighCVSS 7.5No exploitEPSS 11%

    microsoft · ieMay 12, 2003

  • CVE-2003-0116
    28Monitor

    Microsoft Internet Explorer 5.01, 5.5 and 6.0 does not properly check the Cascading Style Sheet input parameter for Modal dialogs, which all

    MediumCVSS 5.0No exploitEPSS 25%

    microsoft · ieMay 12, 2003

  • CVE-2003-0190
    43Plan

    OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which

    MediumCVSS 5.0WeaponizedEPSS 76%

    openbsd · opensshMay 12, 2003

  • CVE-2003-0213
    51Plan

    ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length field of 0 or 1, which

    HighCVSS 7.5WeaponizedEPSS 70%

    poptop · pptp serverMay 12, 2003

  • CVE-2003-0220
    51Plan

    Buffer overflow in the administrator authentication process for Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to e

    HighCVSS 7.5WeaponizedEPSS 69%

    kerio · personal firewall 2May 12, 2003

  • CVE-2003-0222
    39Monitor

    Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary

    CriticalCVSS 9.0No exploitEPSS 11%

    oracle · database serverMay 12, 2003

  • CVE-2003-0233
    36Monitor

    Heap-based buffer overflow in plugin.ocx for Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code via the L

    HighCVSS 7.5No exploitEPSS 18%

    microsoft · ieMay 12, 2003

  • CVE-2003-0228
    44Plan

    Directory traversal vulnerability in Microsoft Windows Media Player 7.1 and Windows Media Player for Windows XP allows remote attackers to e

    HighCVSS 7.5Proof of conceptEPSS 46%

    microsoft · windows media playerMay 27, 2003

  • CVE-2003-0263
    33Monitor

    Multiple buffer overflows in Floosietek FTGate Pro Mail Server (FTGatePro) 1.22 allow remote attackers to execute arbitrary code via long (1

    HighCVSS 7.5Proof of conceptEPSS 11%

    floosietek · ftgateproMay 27, 2003

  • CVE-2003-0264
    52Plan

    Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO argument to slmail.exe,

    HighCVSS 7.5WeaponizedEPSS 71%

    seattle lab software · slmailMay 27, 2003