
CVE-1999-0755 – Microsoft Windows NT 4.0/4.0 SP1/4.0 SP2/4.0 SP3/4.0 SP4/4.0 SP5 - RAS Dial-up Networking Save Password
https://notcve.org/view.php?id=CVE-1999-0755
27 May 1999 — Windows NT RRAS and RAS clients cache a user's password even if the user has not selected the "Save password" option. • https://www.exploit-db.com/exploits/19196 • CWE-255: Credentials Management Errors •

CVE-1999-0715 – Microsoft Windows NT 4.0/4.0 SP1/4.0 SP2/4.0 SP3/4.0 SP4/4.0 SP5 - RAS Phonebook Buffer Overflow
https://notcve.org/view.php?id=CVE-1999-0715
20 May 1999 — Buffer overflow in Remote Access Service (RAS) client allows an attacker to execute commands or cause a denial of service via a malformed phonebook entry. • https://www.exploit-db.com/exploits/19211 •

CVE-1999-0489
https://notcve.org/view.php?id=CVE-1999-0489
17 May 1999 — MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of "untrusted scripted paste" as described in MS:MS98-013. • https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-015 •

CVE-1999-0716 – Microsoft Windows NT 4.0/4.0 SP1/4.0 SP2/4.0 SP3/4.0 SP4/4.0 SP5 - Help File Buffer Overflow
https://notcve.org/view.php?id=CVE-1999-0716
17 May 1999 — Buffer overflow in Windows NT 4.0 help file utility via a malformed help file. • https://www.exploit-db.com/exploits/19209 •

CVE-1999-0717
https://notcve.org/view.php?id=CVE-1999-0717
07 May 1999 — A remote attacker can disable the virus warning mechanism in Microsoft Excel 97. • http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ231304 •

CVE-1999-0444
https://notcve.org/view.php?id=CVE-1999-0444
12 Apr 1999 — Remote attackers can perform a denial of service in Windows machines using malicious ARP packets, forcing a message box display for each packet or filling up log files. • https://marc.info/?l=bugtraq&m=92394891221029&w=2 •

CVE-1999-0382 – Microsoft Windows NT 4.0/SP1/SP2/SP3/SP4 / NT 3.5.1/SP1/SP2/SP3/SP4/SP5 - Screensaver
https://notcve.org/view.php?id=CVE-1999-0382
12 Mar 1999 — The screen saver in Windows NT does not verify that its security context has been changed properly, allowing attackers to run programs with elevated privileges. • https://www.exploit-db.com/exploits/19359 •

CVE-1999-1254
https://notcve.org/view.php?id=CVE-1999-1254
08 Mar 1999 — Windows 95, 98, and NT 4.0 allow remote attackers to cause a denial of service by spoofing ICMP redirect messages from a router, which causes Windows to change its routing tables. • http://marc.info/?l=ntbugtraq&m=92099515709467&w=2 •

CVE-1999-0376 – Microsoft Windows NT 4.0 SP4 - Known DLL Cache
https://notcve.org/view.php?id=CVE-1999-0376
20 Feb 1999 — Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious programs. • https://www.exploit-db.com/exploits/19198 •

CVE-1999-0372 – Hancom Office 2007 - 'Reboot.ini' Clear-Text Passwords
https://notcve.org/view.php?id=CVE-1999-0372
12 Feb 1999 — The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not deleted. • https://www.exploit-db.com/exploits/19192 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •