CVE-1999-0173
FormMail CGI program can be used by web servers other than the host server that the program...
FormMail CGI program can be used by web servers other than the host server that the program resides on.
Exploit likelihood
What each source reports
NVD Score used
5.0
FormMail CGI program can be used by web servers other than the host server that the program resides on.
- Record
CVE-1999-0173- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
FormMail CGI program can be used by web servers other than the host server that the program resides on.
- Record
CVE-1999-0173- Updated
- 2026-11-02
EUVDEUVD-1999-0173 No score
FormMail CGI program can be used by web servers other than the host server that the program resides on.
- Record
EUVD-1999-0173- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jw47-w8q9-cxg3 No score
FormMail CGI program can be used by web servers other than the host server that the program...
FormMail CGI program can be used by web servers other than the host server that the program resides on.
- Record
GHSA-jw47-w8q9-cxg3- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Matt Wright FormMail 1.x - Cross-Site Request Forgery | 1997-01-01 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-1999-0173 is a medium vulnerability (CVSS 5.0) in Matt Wright Formmail, published January 1, 1997. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 4.92%, the 92nd percentile. No source names a fixed version.