
CVE-1999-0870
https://notcve.org/view.php?id=CVE-1999-0870
01 Oct 1998 — Internet Explorer 4.01 allows remote attackers to read arbitrary files by pasting a file name into the file upload control, aka untrusted scripted paste. • https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-015 •

CVE-1999-0871
https://notcve.org/view.php?id=CVE-1999-0871
04 Sep 1998 — Internet Explorer 4.0 and 4.01 allow a remote attacker to read files via IE's cross frame security, aka the "Cross Frame Navigate" vulnerability. • http://www.osvdb.org/7837 •

CVE-1999-1447
https://notcve.org/view.php?id=CVE-1999-1447
28 Jul 1998 — Internet Explorer 4.0 allows remote attackers to cause a denial of service (crash) via HTML code that contains a long CLASSID parameter in an OBJECT tag. • http://marc.info/?l=bugtraq&m=90221104526169&w=2 •

CVE-1999-0537
https://notcve.org/view.php?id=CVE-1999-0537
01 Apr 1998 — A configuration in a web browser such as Internet Explorer or Netscape Navigator allows execution of active content such as ActiveX, Java, Javascript, etc. • https://www.cve.org/CVERecord?id=CVE-1999-0537 •

CVE-1999-0331
https://notcve.org/view.php?id=CVE-1999-0331
01 Jan 1998 — Buffer overflow in Internet Explorer 4.0(1). • https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0331 •

CVE-1999-0967
https://notcve.org/view.php?id=CVE-1999-0967
01 Nov 1997 — Buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource protocol. • https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0967 •

CVE-1999-1446
https://notcve.org/view.php?id=CVE-1999-1446
05 Aug 1997 — Internet Explorer 3 records a history of all URL's that are visited by a user in DAT files located in the Temporary Internet Files and History folders, which are not cleared when the user selects the "Clear History" option, and are not visible when the user browses the folders because of tailored displays. • http://marc.info/?l=ntbugtraq&m=87602837719654&w=2 •

CVE-1999-0031
https://notcve.org/view.php?id=CVE-1999-0031
08 Jul 1997 — JavaScript in Internet Explorer 3.x and 4.x, and Netscape 2.x, 3.x and 4.x, allows remote attackers to monitor a user's web activities, aka the Bell Labs vulnerability. • http://www.codetalker.com/advisories/vendor/hp/hpsbux9707-065.html •

CVE-1999-0280
https://notcve.org/view.php?id=CVE-1999-0280
01 Apr 1997 — Remote command execution in Microsoft Internet Explorer using .lnk and .url files. • https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0280 •

CVE-1999-1128
https://notcve.org/view.php?id=CVE-1999-1128
01 Mar 1997 — Internet Explorer 3.01 on Windows 95 allows remote malicious web sites to execute arbitrary commands via a .isp file, which is automatically downloaded and executed without prompting the user. • http://members.tripod.com/~unibyte/iebug3.htm •