Filters
Microsoft Site Servercphost.dll in Microsoft Site Server 3.0 allows remote attackers to cause a denial of service (disk c…
First published (updated )
Microsoft Site ServerMicrosoft Site Server 3.0 prior to SP4 installs a default user, LDAP_Anonymous, with a default passw…
7.5
First published (updated )
Microsoft Commercial Internet SystemIIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mappe…
First published (updated )
Microsoft Site ServerSample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification num…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Microsoft Site ServerThe Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read arbitrary…
First published (updated )
Microsoft Site ServerDirect Mailer feature in Microsoft Site Server 3.0 saves user domain names and passwords in plaintex…
7.5
First published (updated )
Microsoft Site ServerIIS 4.0 and Site Server 3.0 allow remote attackers to read source code for ASP files if the file is …
First published (updated )
Microsoft Site ServerIIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access rest…
6.4
First published (updated )
Microsoft Commercial Internet SystemMicrosoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, w…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Microsoft Data Access ComponentsThe Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in II…
10
First published (updated )
Microsoft Site ServerA configuration problem in the Ad Server Sample directory (AdSamples) in Microsoft Site Server 3.0 a…
First published (updated )
Netscape Directory ServerInformation from SSL-encrypted sessions via PKCS #1.
First published (updated )