Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not enabled "remember passwords."

InterScan VirusWall SMTP scanner does not properly scan messages with malformed attachments.

Solaris dmi_cmd allows local users to crash the dmispd daemon by adding a malformed file to the /var/dmi/db database.

The initscripts package in Red Hat Linux allows local users to gain privileges via a symlink attack.

Solaris dmispd dmi_cmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database.

UnixWare pis and mkpis commands allow local users to gain privileges via a symlink attack.

Internet Explorer 5.0 and 5.01 allows remote attackers to bypass the cross frame security policy and read files via the external.NavigateAndFind function.

IBM Network Station Manager NetStation allows local users to gain privileges via a symlink attack.

Buffer overflow in UnixWare i2odialogd daemon allows remote attackers to gain root access via a long username/password authorization string.

IIS 4.0 and Site Server 3.0 allow remote attackers to read source code for ASP files if the file is in a virtual directory whose name includes extensions such as .com, .exe, .sh, .cgi, or .dll, aka the "Virtual Directory Naming" vulnerability.

IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-party software via escape characters, aka the "Escape Character Parsing" vulnerability.

Buffer overflow in Lotus Domino HTTP server allows remote attackers to cause a denial of service via a long URL.

Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory.

Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existent script in /cgi-bin.

DNS PRO allows remote attackers to conduct a denial of service via a large number of connections.

IMail POP3 daemon uses weak encryption, which allows local users to read files.

wmmon in FreeBSD allows local users to gain privileges via the .wmmonrc configuration file.

Buffer overflow in Linux linuxconf package allows remote attackers to gain root privileges via a long parameter.

Buffer overflow in Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service or execute commands via a long username.

CascadeView TFTP server allows local users to gain privileges via a symlink attack.