| | CVE-1999-1474 |  Microsoft | high | 7.5 | 7.4%
| | PowerPoint 95 and 97 allows remote attackers to cause an application to be run automatically without… | Dec 31, 1999 | Apr 16, 2026 |
| | CVE-1999-1473 | Microsoft | medium | 5.0 | 16.1%
| | When a Web site redirects the browser to another site, Internet Explorer 3.02 and 4.0 automatically … | Dec 31, 1999 | Apr 16, 2026 |
| | CVE-1999-1472 | Microsoft | medium | 5.0 | 17.7%
| | Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's ma… | Dec 31, 1999 | Apr 16, 2026 |
| | CVE-1999-1451 | Microsoft | medium | 5.0 | 35.6%
| | The Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read arbitrary… | Dec 31, 1999 | Apr 16, 2026 |
| | CVE-1999-1279 | Microsoft | medium | 5.0 | 13.6%
| | An interaction between the AS/400 shared folders feature and Microsoft SNA Server 3.0 and earlier al… | Dec 31, 1999 | Apr 16, 2026 |
| | CVE-1999-1259 | Microsoft | low | 2.1 | 1.9%
| | Microsoft Office 98, Macintosh Edition, does not properly initialize the disk space used by Office 9… | Dec 31, 1999 | Apr 16, 2026 |
| | CVE-1999-1246 | Microsoft | high | 7.5 | 0.9%
| | Direct Mailer feature in Microsoft Site Server 3.0 saves user domain names and passwords in plaintex… | Dec 31, 1999 | Apr 16, 2026 |
| | CVE-1999-1233 | Microsoft | high | 7.5 | 10.3%
| | IIS 4.0 does not properly restrict access for the initial session request from a user's IP address i… | Dec 31, 1999 | Apr 16, 2026 |
| | CVE-1999-1223 | Microsoft | medium | 5.0 | 15.5%
| | IIS 3.0 allows remote attackers to cause a denial of service via a request to an ASP page in which t… | Dec 31, 1999 | Apr 16, 2026 |
| | CVE-1999-1148 | Microsoft | medium | 5.0 | 18.1%
| | FTP service in IIS 4.0 and earlier allows remote attackers to cause a denial of service (resource ex… | Dec 31, 1999 | Apr 16, 2026 |
| | CVE-1999-1094 | Microsoft | high | 7.5 | 6.9%
| | Buffer overflow in Internet Explorer 4.01 and earlier allows remote attackers to execute arbitrary c… | Dec 31, 1999 | Apr 16, 2026 |
| | CVE-1999-1093 | Microsoft | medium | 5.1 | 6.3%
| | Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer… | Dec 31, 1999 | Apr 16, 2026 |
| | CVE-1999-1087 | Microsoft | high | 7.5 | 9.0%
| | Internet Explorer 4 treats a 32-bit number ("dotless IP address") in the a URL as the hostname inste… | Dec 31, 1999 | Apr 16, 2026 |
| | CVE-1999-1055 | Microsoft | high | 7.5 | 7.7%
| | Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow at… | Dec 31, 1999 | Apr 16, 2026 |
| | CVE-1999-1043 | Microsoft | medium | 5.0 | 6.5%
| | Microsoft Exchange Server 5.5 and 5.0 does not properly handle (1) malformed NNTP data, or (2) malfo… | Dec 31, 1999 | Apr 16, 2026 |
| | CVE-1999-1035 | Microsoft | medium | 5.0 | 18.1%
| | IIS 3.0 and 4.0 on x86 and Alpha allows remote attackers to cause a denial of service (hang) via a m… | Dec 31, 1999 | Apr 16, 2026 |
| | CVE-1999-0154 | Microsoft | medium | 5.0 | 48.2%
| | IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot)… | Dec 31, 1999 | Apr 16, 2026 |
| | CVE-2000-0082 | Microsoft | medium | 5.0 | 36.6%
| | WebTV email client allows remote attackers to force the client to send email without the user's know… | Jan 2, 2000 | Apr 16, 2026 |
| | CVE-2000-0085 | Microsoft | high | 7.5 | 12.0%
| | Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attack… | Jan 4, 2000 | Apr 16, 2026 |
| | CVE-2000-0053 | Microsoft | high | 7.5 | 14.2%
| | Microsoft Commercial Internet System (MCIS) IMAP server allows remote attackers to cause a denial of… | Jan 4, 2000 | Apr 16, 2026 |
| | CVE-1999-0876 | Microsoft | critical | 10.0 | 24.1%
| | Buffer overflow in Internet Explorer 4.0 via EMBED tag. | Jan 4, 2000 | Apr 16, 2026 |
| | CVE-2000-0061 | Microsoft | critical | 10.0 | 16.2%
| | Internet Explorer 5 does not modify the security zone for a document that is being loaded into a win… | Jan 7, 2000 | Apr 16, 2026 |
| | CVE-2000-0081 | Microsoft | critical | 10.0 | 29.3%
| | Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attack… | Jan 10, 2000 | Apr 16, 2026 |
| | CVE-2000-0071 | Microsoft | medium | 5.0 | 71.4%
| | IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-… | Jan 11, 2000 | Apr 16, 2026 |
| | CVE-2000-0090 |  VMware | low | 3.6 | 0.1%
| | VMWare 1.1.2 allows local users to cause a denial of service via a symlink attack. | Jan 17, 2000 | Apr 16, 2026 |
| | CVE-2000-0088 | Microsoft | high | 7.2 | 0.5%
| | Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows… | Jan 20, 2000 | Apr 16, 2026 |
| | CVE-2000-0115 | Microsoft | medium | 5.0 | 4.9%
| | IIS allows local users to cause a denial of service via invalid regular expressions in a Visual Basi… | Jan 21, 2000 | Apr 16, 2026 |
| | CVE-2000-0126 | Microsoft | medium | 5.0 | 84.7%
| | Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a .… | Jan 26, 2000 | Apr 16, 2026 |
| | CVE-2000-0098 | Microsoft | medium | 5.0 | 82.7%
| | Microsoft Index Server allows remote attackers to determine the real path for a web directory via a … | Jan 26, 2000 | Apr 16, 2026 |
| | CVE-2000-0097 | Microsoft | medium | 5.0 | 60.9%
| | The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, … | Jan 26, 2000 | Apr 16, 2026 |
| | CVE-2000-0116 |  Check Point | high | 7.5 | 1.8%
| | Firewall-1 does not properly filter script tags, which allows remote attackers to bypass the "Strip … | Jan 29, 2000 | Apr 16, 2026 |
| | CVE-2000-0132 | Microsoft | low | 2.6 | 6.0%
| | Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStre… | Jan 31, 2000 | Apr 16, 2026 |
| | CVE-2000-1205 |  Apache | medium | 4.3 | 5.7%
| | Cross site scripting vulnerabilities in Apache 1.3.0 through 1.3.11 allow remote attackers to execut… | Feb 1, 2000 | Apr 16, 2026 |
| | CVE-2000-0105 | Microsoft | medium | 5.0 | 54.2%
| | Outlook Express 5.01 and Internet Explorer 5.01 allow remote attackers to view a user's email messag… | Feb 1, 2000 | Apr 16, 2026 |
| | CVE-2000-0114 | Microsoft | medium | 5.0 | 5.5%
| | Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account v… | Feb 2, 2000 | Apr 16, 2026 |
| | CVE-2000-0122 | Microsoft | medium | 5.0 | 40.3%
| | Frontpage Server Extensions allows remote attackers to determine the physical path of a virtual dire… | Feb 3, 2000 | Apr 16, 2026 |
| | CVE-2000-0150 | Check Point | high | 7.5 | 0.5%
| | Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server b… | Feb 12, 2000 | Apr 16, 2026 |
| | CVE-2000-0167 | Microsoft | low | 2.1 | 0.2%
| | IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long… | Feb 15, 2000 | Apr 16, 2026 |
| | CVE-2000-0156 | Microsoft | medium | 5.1 | 17.5%
| | Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outsi… | Feb 16, 2000 | Apr 16, 2026 |
| | CVE-2000-0162 | Microsoft | medium | 5.1 | 1.5%
| | The Microsoft virtual machine (VM) in Internet Explorer 4.x and 5.x allows a remote attacker to read… | Feb 18, 2000 | Apr 16, 2026 |
| | CVE-2000-0161 | Microsoft | high | 7.5 | 8.4%
| | Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification num… | Feb 18, 2000 | Apr 16, 2026 |
| | CVE-2000-0160 | Microsoft | high | 7.6 | 10.3%
| | The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attack… | Feb 21, 2000 | Apr 16, 2026 |
| | CVE-2000-0211 | Microsoft | medium | 5.0 | 26.6%
| | The Windows Media server allows remote attackers to cause a denial of service via a series of client… | Feb 23, 2000 | Apr 16, 2026 |
| | CVE-2000-0179 |  HPE | medium | 5.0 | 10.5%
| | HP OpenView OmniBack 2.55 allows remote attackers to cause a denial of service via a large number of… | Feb 28, 2000 | Apr 16, 2026 |
| | CVE-2000-0216 | Microsoft | medium | 5.0 | 13.0%
| | Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Re… | Feb 29, 2000 | Apr 16, 2026 |
| | CVE-2000-0201 | Microsoft | medium | 5.1 | 5.1%
| | The window.showHelp() method in Internet Explorer 5.x does not restrict HTML help files (.chm) to be… | Mar 1, 2000 | Apr 16, 2026 |
| | CVE-2000-0200 | Microsoft | medium | 5.1 | 18.4%
| | Buffer overflow in Microsoft Clip Art Gallery allows remote attackers to cause a denial of service o… | Mar 6, 2000 | Apr 16, 2026 |
| | CVE-2000-0202 | Microsoft | high | 7.5 | 12.6%
| | Microsoft SQL Server 7.0 and Microsoft Data Engine (MSDE) 1.0 allow remote attackers to gain privile… | Mar 8, 2000 | Apr 16, 2026 |
| | CVE-2000-0181 | Check Point | medium | 5.0 | 0.7%
| | Firewall-1 3.0 and 4.0 leaks packets with private IP address information, which could allow remote a… | Mar 11, 2000 | Apr 16, 2026 |
| | CVE-2000-0199 | Microsoft | high | 7.2 | 0.2%
| | When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the "Alwa… | Mar 14, 2000 | Apr 16, 2026 |