CVE-1999-1235
Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which...
Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow (1) local users to read the information from another user's index.dat, or (2) people who are physically observing ("shoulder surfing") another user to read the information from the status bar when the user moves the mouse over a link.
Exploit likelihood
What each source reports
NVD Score used
Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow (1) local users to read the information from another user's index.dat, or (2) people who are physically observing ("shoulder surfing") another user to read the information from the status bar when the user moves the mouse over a link.
- Record
CVE-1999-1235- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow (1) local users to read the information from another user's index.dat, or (2) people who are physically observing ("shoulder surfing") another user to read the information from the status bar when the user moves the mouse over a link.
- Record
CVE-1999-1235- Updated
- 2026-11-02
EUVDEUVD-1999-1216 No score
Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow (1) local users to read the information from another user's index.dat, or (2) people who are physically observing ("shoulder surfing") another user to read the information from the status bar when the user moves the mouse over a link.
- Record
EUVD-1999-1216- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v7w3-r9q2-mwx4 No score
Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which...
Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow (1) local users to read the information from another user's index.dat, or (2) people who are physically observing ("shoulder surfing") another user to read the information from the status bar when the user moves the mouse over a link.
- Record
GHSA-v7w3-r9q2-mwx4- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Internet Explorer 5 - FTP Password Storage | 1999-08-25 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-1999-1235 is a medium vulnerability (CVSS 4.6) in Microsoft Internet Explorer, published August 25, 1999. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.71%, the 86th percentile. No source names a fixed version.