CVSS: 7.5EPSS: 3%CPEs: 4EXPL: 2CVE-2001-1325 – Microsoft Internet Explorer 5.0/5.5 / OE 5.5 - XML Stylesheets Active Scripting
https://notcve.org/view.php?id=CVE-2001-1325
Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute scripts when Active Scripting is disabled by including the scripts in XML stylesheets (XSL) that are referenced using an IFRAME tag, possibly due to a vulnerability in Windows Scripting Host (WSH). • https://www.exploit-db.com/exploits/20782 http://www.securityfocus.com/archive/1/3AE02004.57FDF958%40guninski.com http://www.securityfocus.com/bid/2633 https://exchange.xforce.ibmcloud.com/vulnerabilities/6448 •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2001-0145
https://notcve.org/view.php?id=CVE-2001-0145
Buffer overflow in VCard handler in Outlook 2000 and 98, and Outlook Express 5.x, allows an attacker to execute arbitrary commands via a malformed vCard birthday field. • http://www.atstake.com/research/advisories/2001/a022301-1.txt https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-012 •
CVSS: 5.0EPSS: 5%CPEs: 3EXPL: 2CVE-2001-0322 – Microsoft Internet Explorer 4 / Outlook 2000/5.5 - 'MSHTML.dll' Crash
https://notcve.org/view.php?id=CVE-2001-0322
MSHTML.DLL HTML parser in Internet Explorer 4.0, and other versions, allows remote attackers to cause a denial of service (application crash) via a script that creates and deletes an object that is associated with the browser window object. • https://www.exploit-db.com/exploits/20552 http://marc.info/?l=bugtraq&m=97958685100219&w=2 http://www.securityfocus.com/bid/2202 https://exchange.xforce.ibmcloud.com/vulnerabilities/5938 •
CVSS: 5.0EPSS: 0%CPEs: 4EXPL: 1CVE-2000-0653 – Microsoft Outlook Express 5 - JavaScript Email Access
https://notcve.org/view.php?id=CVE-2000-0653
Microsoft Outlook Express allows remote attackers to monitor a user's email by creating a persistent browser link to the Outlook Express windows, aka the "Persistent Mail-Browser Link" vulnerability. • https://www.exploit-db.com/exploits/19738 http://www.securityfocus.com/bid/1502 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-045 •
CVSS: 7.5EPSS: 1%CPEs: 7EXPL: 0CVE-2000-0621
https://notcve.org/view.php?id=CVE-2000-0621
Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote attackers to read files on the client's system via a malformed HTML message that stores files outside of the cache, aka the "Cache Bypass" vulnerability. • http://www.cert.org/advisories/CA-2000-14.html http://www.securityfocus.com/bid/1501 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-046 https://exchange.xforce.ibmcloud.com/vulnerabilities/5013 •