Vulnerabilities > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2003-12-31 | CVE-2003-1498 | Cross-Site Scripting vulnerability in Wrensoft Zoom Search Engine Cross-site scripting (XSS) vulnerability in search.php for WRENSOFT Zoom Search Engine 2.0 Build 1018 and earlier allows remote attackers to inject arbitrary web script or HTML via the zoom_query parameter. | 4.3 |
| 2003-12-31 | CVE-2003-1497 | Buffer Errors vulnerability in Linksys Befsx41 1.43.3 Buffer overflow in the system log viewer of Linksys BEFSX41 1.44.3 allows remote attackers to cause a denial of service via an HTTP request with a long Log_Page_Num variable. | 6.3 |
| 2003-12-31 | CVE-2003-1494 | Resource Management Errors vulnerability in HP Openview Network Node Manager 6.2/6.4 Unspecified vulnerability in HP OpenView Network Node Manager (NNM) 6.2 and 6.4 allows remote attackers to cause a denial of service (CPU consumption) via a crafted TCP packet. | 5.0 |
| 2003-12-31 | CVE-2003-1493 | Denial Of Service vulnerability in HP OpenView Network Node Manager Memory leak in HP OpenView Network Node Manager (NNM) 6.2 and 6.4 allows remote attackers to cause a denial of service (memory exhaustion) via crafted TCP packets. | 5.0 |
| 2003-12-31 | CVE-2003-1492 | Link Following vulnerability in multiple products Netscape Navigator 7.0.2 and Mozilla allows remote attackers to access cookie information in a different domain via an HTTP request for a domain with an extra . | 5.0 |
| 2003-12-31 | CVE-2003-1489 | Improper Authentication vulnerability in Truegalerie 1.0 upload.php in Truegalerie 1.0 allows remote attackers to read arbitrary files by specifying the target filename in the file cookie in form.php, then downloading the file from the image gallery. | 5.0 |
| 2003-12-31 | CVE-2003-1488 | Improper Input Validation vulnerability in Truelogik Truegalerie 1.0 The (1) verif_admin.php and (2) check_admin.php scripts in Truegalerie 1.0 allow remote attackers to gain administrator access via a request to admin.php without the connect parameter and with the loggedin parameter set to any value, such as 1. | 6.4 |
| 2003-12-31 | CVE-2003-1486 | Information Exposure vulnerability in Phorum 3.4/3.4.1/3.4.2 Phorum 3.4 through 3.4.2 allows remote attackers to obtain the full path of the web server via an incorrect HTTP request to (1) smileys.php, (2) quick_listrss.php, (3) purge.php, (4) news.php, (5) memberlist.php, (6) forum_listrss.php, (7) forum_list_rdf.php, (8) forum_list.php, or (9) move.php, which leaks the information in an error message. | 5.0 |
| 2003-12-31 | CVE-2003-1485 | Improper Input Validation vulnerability in Clearswift Mailsweeper Clearswift MAILsweeper 4.0 through 4.3.7 allows remote attackers to bypass filtering via a file attachment that contains "multiple extensions combined with large blocks of white space." | 5.0 |
| 2003-12-31 | CVE-2003-1484 | Buffer Errors vulnerability in Microsoft IE 6.0 Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) by creating a DHTML link that uses the AnchorClick "A" object with a blank href attribute. | 4.3 |