Microsoft Site Server vulnerabilities

• microsoft site server, site server commerce +1 more cphost.dll in Microsoft Site Server 3.0 allows remote attackers to cause a denial of service ... CVE-2002-2081 EPSS 15.4% 5.0 MediumDecember 31, 2002
• microsoft site server, windows nt, site server commerce +2 more Cross-site scripting (XSS) vulnerability in the default ASP pages on Microsoft Site Server 3.0 on... CVE-2002-2073 Public exploit EPSS 12.9% 4.3 MediumDecember 31, 2002
• microsoft site server, site server commerce +1 more Microsoft Site Server 3.0 prior to SP4 installs a default user, LDAP_Anonymous, with a default... CVE-2002-1769 EPSS 11.7% 7.5 HighDecember 31, 2002
• microsoft commercial internet system, internet information server, internet information services +3 more +5 more IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is... CVE-2000-0246 Public exploit EPSS 80.0% 5.0 MediumMarch 30, 2000
• microsoft site server Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification... CVE-2000-0161 EPSS 10.1% 7.5 HighFebruary 18, 2000
• microsoft site server, internet information server +1 more The Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read... CVE-1999-1451 EPSS 17.6% 5.0 MediumDecember 31, 1999
• microsoft site server Direct Mailer feature in Microsoft Site Server 3.0 saves user domain names and passwords in... CVE-1999-1246 7.5 HighDecember 31, 1999
• microsoft site server, internet information server, site server commerce +2 more IIS 4.0 and Site Server 3.0 allow remote attackers to read source code for ASP files if the file... CVE-2000-0025 EPSS 34.9% 5.0 MediumDecember 21, 1999
• microsoft internet information server, site server, site server commerce +2 more IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access... CVE-2000-0024 EPSS 12.2% 6.4 MediumDecember 21, 1999
• microsoft commercial internet system, site server, site server commerce +2 more Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie... CVE-1999-0910 5.0 MediumSeptember 10, 1999
• microsoft commercial internet system, internet information server, site server +2 more Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers. CVE-1999-0867 Public exploit EPSS 21.5% 5.0 MediumAugust 11, 1999
• microsoft commercial internet system, internet information server, site server +1 more +3 more Race condition in the SSL ISAPI filter in IIS and other servers may leak information in plaintext. CVE-1999-0861 2.6 LowAugust 11, 1999
• microsoft data access components, index server, internet information server +1 more +3 more The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in... CVE-1999-1011 Public exploit EPSS 77.1% 10.0 HighJuly 19, 1999
• microsoft site server A configuration problem in the Ad Server Sample directory (AdSamples) in Microsoft Site Server 3... CVE-1999-1520 Public exploit EPSS 11.7% 5.0 MediumMay 11, 1999
• microsoft site server MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web... CVE-1999-0360 Public exploit 7.2 HighJanuary 30, 1999
• c2net stonghold web server, hp open market secure webserver, microsoft exchange server +10 more +12 more Information from SSL-encrypted sessions via PKCS #1. CVE-1999-0007 5.0 MediumJune 26, 1998