6801 matches found
CVE-2004-2694
Microsoft Outlook Express 6.0 allows remote attackers to bypass intended access restrictions, load content from arbitrary sources into the Outlook context, and facilitate phishing attacks via a "BASE HREF" with the target set to "top"...
CVE-2004-2137
Outlook Express 6.0, when sending multipart e-mail messages using the "Break apart messages larger than" setting, leaks the BCC recipients of the message to the addresses listed in the To and CC fields, which may allow remote attackers to obtain sensitive information...
CVE-2004-2210
Multiple cross-site scripting XSS vulnerabilities in Express-Web Content Management System CMS allow remote attackers to steal cookie-based authentication information and possibly perform other exploits via the 1 n, 2 b, 3 e, or 4 a parameters to default.asp, 5 the Referer header in an HTTP reque...
CVE-2004-2320
The default configuration of BEA WebLogic Server and Express 8.1 SP2 and earlier, 7.0 SP4 and earlier, 6.1 through SP6, and 5.1 through SP13 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing XST attacks in applications that are...
CVE-2004-2320: Exposure of Sensitive Information to an Unauthorized Actor
The default configuration of BEA WebLogic Server and Express 8.1 SP2 and earlier, 7.0 SP4 and earlier, 6.1 through SP6, and 5.1 through SP13 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing XST attacks in applications that are...
Gadu-Gadu Remote DoS (all versions)
Product: Gadu-Gadu, all available versions including the latest 6.1 build156 Vendor: SMS-EXPRESS.COM http://www.gadu-gadu.pl Impact: Remote Denial of Service Severity: Important Author: Maciej Soltysiak [email protected] Advisory: http://www.soltysiak.com/gg-dos.txt ISSUE It is possible to...
Microsoft Outlook Express 4.x5.x6.0 - Plaintext Email Security Policy Bypass
Microsoft Outlook Express 4.x5.x6.0 - Plaintext Email Security Policy Bypass source: https://www.securityfocus.com/bid/11447/info Microsoft Outlook Express is reported prone to a security policy bypass vulnerability. The vulnerability presents itself if an attached image file is referenced using ...
Microsoft Outlook Express 4.x/5.x/6.0 - Plaintext Email Security Policy Bypass
source: https://www.securityfocus.com/bid/11447/info Microsoft Outlook Express is reported prone to a security policy bypass vulnerability. The vulnerability presents itself if an attached image file is referenced using a specially crafted CID URI. This will result in a policy bypass because the...
[SA12839] Express-Web Content Management System Unspecified Cross-Site Scripting
TITLE: Express-Web Content Management System Unspecified Cross-Site Scripting SECUNIA ADVISORY ID: SA12839 VERIFY ADVISORY: http://secunia.com/advisories/12839/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Express-Web Content Management System...
CVE-2002-1169
The CVE-2002-1169 entry affects IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x prior to 4.0.1.26. The underlying issue is a malformed HTTP request to helpout.exe that omits the HTTP version number, causing ibmproxy.exe to crash and resulting in a denial of service. Connected sources (Op...
CVE-2002-1179
Buffer overflow in the S/MIME Parsing capability of Microsoft Outlook Express 5.5 and 6.0 is triggered when a user views or previews a digitally signed email with a long From address, allowing potential remote code execution. The root cause is an overflow in the S/MIME parsing path, leading to ar...
CVE-2002-1179
Buffer overflow in the S/MIME Parsing capability in Microsoft Outlook Express 5.5 and 6.0 allows remote attackers to execute arbitrary code via a digitally signed email with a long "From" address, which triggers the overflow when the user views or previews the message...
CVE-2002-1179: Undefined Security Weakness
Buffer overflow in the S/MIME Parsing capability in Microsoft Outlook Express 5.5 and 6.0 allows remote attackers to execute arbitrary code via a digitally signed email with a long "From" address, which triggers the overflow when the user views or previews the message...
CVE-2002-1169: Undefined Security Weakness
IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to cause a denial of service crash via an HTTP request to helpout.exe with a missing HTTP version number, which causes ibmproxy.exe to crash...
Microsoft Outlook Express information leak
Bcc: header may not be stripped for partial multipart MIME message...
[SA12376] Microsoft Outlook Express "BCC:" Recipient Disclosure Weakness
TITLE: Microsoft Outlook Express "BCC:" Recipient Disclosure Weakness SECUNIA ADVISORY ID: SA12376 VERIFY ADVISORY: http://secunia.com/advisories/12376/ CRITICAL: Not critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Microsoft Outlook Express 6...
Microsoft Outlook Express for MacOS HTML Attachment Automatic Download Vulnerability
Binary data 1293.prm...
Microsoft Outlook Express Mail Client Detection
Binary data 1332.prm...