By publication date
Exploited and new serious CVEs: May 1999
13 records · 0 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
14Monitor | CVE-1999-0487Proof of concept | The DHTML Edit ActiveX control in Internet Explorer allows remote attackers to read arbitrary files.microsoft · internet explorer | Low2.6 | — | 13.2% | May 1, 1999 |
44Plan | CVE-1999-1241No exploit | Internet Explorer, with a security setting below Medium, allows remote attackers to execute arbitrary commands via a malicious web page thatmicrosoft · internet explorer | Critical10.0 | — | 14.4% | May 6, 1999 |
33Monitor | CVE-1999-0736Proof of concept | The showcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.microsoft · internet information server | Medium5.0 | — | 44.8% | May 7, 1999 |
28Monitor | CVE-1999-0737No exploit | The viewcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.microsoft · internet information server | Medium5.0 | — | 28.0% | May 7, 1999 |
29Monitor | CVE-1999-0738No exploit | The code.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.microsoft · internet information server | Medium5.0 | — | 28.7% | May 7, 1999 |
29Monitor | CVE-1999-0739No exploit | The codebrws.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.microsoft · internet information server | Medium5.0 | — | 28.7% | May 7, 1999 |
25Monitor | CVE-1999-1033Proof of concept | Microsoft Outlook Express before 4.72.3612.1700 allows a malicious user to send a message that contains a .., which can inadvertently cause microsoft · outlook express | Medium5.0 | — | 17.5% | May 11, 1999 |
23Monitor | CVE-1999-1520Proof of concept | A configuration problem in the Ad Server Sample directory (AdSamples) in Microsoft Site Server 3.0 allows an attacker to obtain the SITE.CSCmicrosoft · site server | Medium5.0 | — | 11.6% | May 11, 1999 |
44Plan | CVE-1999-0489No exploit | MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of "untrmicrosoft · windows nt | Critical10.0 | — | 12.4% | May 17, 1999 |
50Plan | CVE-1999-1510Weaponized | Buffer overflows in Bisonware FTP server prior to 4.1 allow remote attackers to cause a denial of service, and possibly execute arbitrary cobisonware · bisonware ftp server | High7.5 | — | 67.0% | May 17, 1999 |
50Plan | CVE-1999-0920Weaponized | Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD command.university of washington · imap | Critical10.0 | — | 32.3% | May 26, 1999 |
24Monitor | CVE-1999-0755Proof of concept | Windows NT RRAS and RAS clients cache a user's password even if the user has not selected the "Save password" option.microsoft · windows 2000 · CWE-255 | Medium5.0 | — | 14.9% | May 27, 1999 |
33Monitor | CVE-1999-0802No exploit | Buffer overflow in Internet Explorer 5 allows remote attackers to execute commands via a malformed Favorites icon.microsoft · internet explorer · CWE-119 | High7.6 | — | 10.1% | May 27, 1999 |
- CVE-1999-048714Monitor
The DHTML Edit ActiveX control in Internet Explorer allows remote attackers to read arbitrary files.
LowCVSS 2.6Proof of conceptEPSS 13%microsoft · internet explorerMay 1, 1999
- CVE-1999-124144Plan
Internet Explorer, with a security setting below Medium, allows remote attackers to execute arbitrary commands via a malicious web page that
CriticalCVSS 10.0No exploitEPSS 14%microsoft · internet explorerMay 6, 1999
- CVE-1999-073633Monitor
The showcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.
MediumCVSS 5.0Proof of conceptEPSS 44%microsoft · internet information serverMay 7, 1999
- CVE-1999-073728Monitor
The viewcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.
MediumCVSS 5.0No exploitEPSS 28%microsoft · internet information serverMay 7, 1999
- CVE-1999-073829Monitor
The code.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.
MediumCVSS 5.0No exploitEPSS 28%microsoft · internet information serverMay 7, 1999
- CVE-1999-073929Monitor
The codebrws.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.
MediumCVSS 5.0No exploitEPSS 28%microsoft · internet information serverMay 7, 1999
- CVE-1999-103325Monitor
Microsoft Outlook Express before 4.72.3612.1700 allows a malicious user to send a message that contains a .., which can inadvertently cause
MediumCVSS 5.0Proof of conceptEPSS 17%microsoft · outlook expressMay 11, 1999
- CVE-1999-152023Monitor
A configuration problem in the Ad Server Sample directory (AdSamples) in Microsoft Site Server 3.0 allows an attacker to obtain the SITE.CSC
MediumCVSS 5.0Proof of conceptEPSS 11%microsoft · site serverMay 11, 1999
- CVE-1999-048944Plan
MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of "untr
CriticalCVSS 10.0No exploitEPSS 12%microsoft · windows ntMay 17, 1999
- CVE-1999-151050Plan
Buffer overflows in Bisonware FTP server prior to 4.1 allow remote attackers to cause a denial of service, and possibly execute arbitrary co
HighCVSS 7.5WeaponizedEPSS 67%bisonware · bisonware ftp serverMay 17, 1999
- CVE-1999-092050Plan
Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD command.
CriticalCVSS 10.0WeaponizedEPSS 32%university of washington · imapMay 26, 1999
- CVE-1999-075524Monitor
Windows NT RRAS and RAS clients cache a user's password even if the user has not selected the "Save password" option.
MediumCVSS 5.0Proof of conceptEPSS 14%microsoft · windows 2000May 27, 1999
- CVE-1999-080233Monitor
Buffer overflow in Internet Explorer 5 allows remote attackers to execute commands via a malformed Favorites icon.
HighCVSS 7.6No exploitEPSS 10%microsoft · internet explorerMay 27, 1999