FR
Product
Frontpage
On CISA KEVExploited in the wild
23
CVEs
1
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch
Add Frontpage to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2007-0671 In wildKEV | 8.8 | Feb 3 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: 2000; 2002; 2003 |
| CVE-1999-0012 | 7.0 | Feb 6 | Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names Affected: All versions, or not specified |
| CVE-2013-3137 | – | Sep 11 | Microsoft FrontPage 2003 SP3 does not properly parse DTDs, which allows remote attackers to obtain sensitive information via crafted XML data in a FrontPage document, aka "XML… Affected: 2003 |
| CVE-2008-3068 | – | Jul 7 | Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List (CRL) checks by using an arbitrary… Affected: 2003 |
| CVE-2007-3109 | – | Jun 7 | The CERN Image Map Dispatcher (htimage.exe) in Microsoft FrontPage allows remote attackers to determine the existence, and possibly partial contents, of arbitrary files under the… Affected: All versions, or not specified |
| CVE-2006-3877 | – | Oct 10 | Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute… Affected: 2000; 2002; 2003 |
| CVE-2005-2143 | – | Jul 5 | Microsoft Front Page allows attackers to cause a denial of service (crash) via a crafted style tag in a web page Affected: All versions, or not specified |
| CVE-2004-2179 | – | Dec 31 | asycpict.dll, as used in Microsoft products such as Front Page 97 and 98, allows remote attackers to cause a denial of service (hang) via a JPEG image with maximum height and… Affected: 97; 98 |
| CVE-2004-0573 | – | Sep 28 | Buffer overflow in the converter for Microsoft WordPerfect 5.x on Office 2000, Office XP, Office 2003, and Works Suites 2001 through 2004 allows remote attackers to execute… Affected: 2000; 2002; 2003 |
| CVE-2004-0200 | – | Sep 28 | Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code… Affected: 2002; 2003 |
| CVE-1999-0681 | – | Mar 12 | Buffer overflow in Microsoft FrontPage Server Extensions (PWS) 3.0.2.926 on Windows 95, and possibly other versions, allows remote attackers to cause a denial of service via a… Affected: 97; 98 |
| CVE-2000-0709 | – | Oct 20 | The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to cause a denial of service in some components by requesting a URL whose name… Affected: All versions, or not specified |
| CVE-2000-0710 | – | Oct 20 | The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the server components by requesting an invalid… Affected: All versions, or not specified |
| CVE-2000-0746 | – | Oct 20 | Vulnerabilities in IIS 4.0 and 5.0 do not properly protect against cross-site scripting (CSS) attacks Affected: All versions, or not specified |
| CVE-2000-0419 | – | May 11 | The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me" function in Office Help,… Affected: 2000 |
| CVE-2000-0413 | – | May 6 | The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML, HTM, ASP, and SHTML files by… Affected: All versions, or not specified |
| CVE-2000-0256 | – | Apr 19 | Buffer overflows in htimage.exe and Imagemap.exe in FrontPage 97 and 98 Server Extensions allow a user to conduct activities that are not otherwise available through the web site,… Affected: All versions, or not specified |
| CVE-2000-0260 | – | Apr 14 | Buffer overflow in the dvwssr.dll DLL in Microsoft Visual Interdev 1.0 allows users to cause a denial of service or execute commands, aka the "Link View Server-Side Component"… Affected: All versions, or not specified |
| CVE-2000-0122 | – | Feb 3 | Frontpage Server Extensions allows remote attackers to determine the physical path of a virtual directory via a GET request to the htimage.exe CGI program Affected: 98; 2000 |
| CVE-1999-1016 | – | Aug 27 | Microsoft HTML control as used in (1) Internet Explorer 5.0, (2) FrontPage Express, (3) Outlook Express 5, and (4) Eudora, and possibly others, allows remote malicious web site or… Affected: All versions, or not specified |
| CVE-1999-1052 | – | Aug 24 | Microsoft FrontPage stores form results in a default location in /_private/form_results.txt, which is world-readable and accessible in the document root, which allows remote… Affected: All versions, or not specified |
| CVE-2000-0153 | – | Mar 26 | FrontPage Personal Web Server (PWS) allows remote attackers to read files via a Affected: All versions, or not specified |
| CVE-1999-0386 | – | Mar 1 | Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server by using a nonstandard URL Affected: All versions, or not specified |
Showing 23