Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:frontpage:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductFrontpage (9a82a89c-4e04-5d52-b171-962307e9cf59)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-3109 vulnerable 2026-06-08 04:49:53.259835 Details available
The CERN Image Map Dispatcher (htimage.exe) in Microsoft FrontPage allows remote attackers to determine the existence, and possibly partial contents, of arbitrary files under the web root via a relative pathname in the PATH_INFO.
Published: 2007-06-07T21:00:00.000Z
Updated: 2024-08-07T14:05:28.542Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2143 vulnerable 2026-06-08 04:48:28.491544 Details available
Microsoft Front Page allows attackers to cause a denial of service (crash) via a crafted style tag in a web page.
Published: 2005-07-05T04:00:00.000Z
Updated: 2024-09-16T19:30:14.655Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0746 vulnerable 2026-06-08 04:45:18.712201 Details available
Vulnerabilities in IIS 4.0 and 5.0 do not properly protect against cross-site scripting (CSS) attacks. They allow a malicious web site operator to embed scripts in a link to a trusted site, which are returned without quoting in an error message back to the client. The client then executes those scripts in the same context as the trusted site, aka the "IIS Cross-Site Scripting" vulnerabilities.
Published: 2000-09-21T04:00:00.000Z
Updated: 2024-08-08T05:28:41.328Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0710 vulnerable 2026-06-08 04:45:18.647465 Details available
The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the server components by requesting an invalid URL whose name includes a standard DOS device name.
Published: 2000-09-21T04:00:00.000Z
Updated: 2024-08-08T05:28:40.980Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0709 vulnerable 2026-06-08 04:45:18.647073 Details available
The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to cause a denial of service in some components by requesting a URL whose name includes a standard DOS device name.
Published: 2000-09-21T04:00:00.000Z
Updated: 2024-08-08T05:28:41.478Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0413 vulnerable 2026-06-08 04:44:58.486410 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0260 vulnerable 2026-06-08 04:44:58.436688 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0256 vulnerable 2026-06-08 04:44:58.435596 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0153 vulnerable 2026-06-08 04:44:58.404981 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-1999-1052 vulnerable 2026-06-08 04:44:58.196042 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-1999-0386 vulnerable 2026-06-08 04:44:58.020683 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-1999-0012 vulnerable 2026-06-08 04:44:57.895036 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.