CVE-2000-0597
https://notcve.org/view.php?id=CVE-2000-0597
Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97 are marked as safe for scripting, which allows remote attackers to force Internet Explorer or some email clients to save files to arbitrary locations via the Visual Basic for Applications (VBA) SaveAs function, aka the "Office HTML Script" vulnerability. • http://www.securityfocus.com/bid/1399 http://www.securityfocus.com/templates/archive.pike?list=1&msg=39589349.ED9DBCAB%40nat.bg https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-049 •
CVE-2000-0419
https://notcve.org/view.php?id=CVE-2000-0419
The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me" function in Office Help, aka the "Office 2000 UA Control" vulnerability. • http://www.cert.org/advisories/CA-2000-07.html http://www.microsoft.com/technet/support/kb.asp?ID=262767 http://www.securityfocus.com/bid/1197 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-034 •
CVE-2000-0277
https://notcve.org/view.php?id=CVE-2000-0277
Microsoft Excel 97 and 2000 does not warn the user when executing Excel Macro Language (XLM) macros in external text files, which could allow an attacker to execute a macro virus, aka the "XLM Text Macro" vulnerability. • http://www.osvdb.org/1272 http://www.securityfocus.com/bid/1087 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-022 • CWE-254: 7PK - Security Features •
CVE-1999-1055
https://notcve.org/view.php?id=CVE-1999-1055
Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute arbitrary commands by using the CALL function to execute a malicious DLL, aka the Excel "CALL Vulnerability." • http://www.securityfocus.com/bid/179 https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-018 https://exchange.xforce.ibmcloud.com/vulnerabilities/1737 •