Microsoft FrontPage Extensions - Information Disclosure

Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /vtibin/ virtual directory. id: CVE-2000-0114 info: name: Microsoft FrontPage Extensions - Information Disclosure author: r3naissance,matejsmycka severity...

Microsoft IIS shtml.dll XSS

The version of the FrontPage extensions running on the remote web server is affected by a cross-site scripting XSS vulnerability in shtml.dll due to improper validation of filenames. An unauthenticated, remote attacker can exploit this, by convincing a user to follow a specially crafted URL, to...

Buffer overflow in Microsoft FrontPage SmartHTML

Buffer overflow in shtml.dll...