Every CVE Search/ Get API key

CVE-1999-0173

FormMail CGI program can be used by web servers other than the host server that the program...

5.0 MediumPublic exploit

FormMail CGI program can be used by web servers other than the host server that the program resides on.

Exploit likelihood

4.92%Up 0.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

FormMail CGI program can be used by web servers other than the host server that the program resides on.

Record
CVE-1999-0173
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Updated
2026-11-02
CVE List No score

FormMail CGI program can be used by web servers other than the host server that the program resides on.

Record
CVE-1999-0173
Updated
2026-11-02
EUVDEUVD-1999-0173 No score

FormMail CGI program can be used by web servers other than the host server that the program resides on.

Record
EUVD-1999-0173
Updated
2026-11-03
GitHub AdvisoriesGHSA-jw47-w8q9-cxg3 No score

FormMail CGI program can be used by web servers other than the host server that the program...

FormMail CGI program can be used by web servers other than the host server that the program resides on.

Record
GHSA-jw47-w8q9-cxg3
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBMatt Wright FormMail 1.x - Cross-Site Request Forgery1997-01-01

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-1999-0173 is a medium vulnerability (CVSS 5.0) in Matt Wright Formmail, published January 1, 1997. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 4.92%, the 92nd percentile. No source names a fixed version.

References

MoveEnter Open