Vulnerabilities > Microsoft > Frontpage Server Extensions

DATE CVE VULNERABILITY TITLE RISK
2006-04-11 CVE-2006-0015 Cross-Site Scripting vulnerability in Microsoft products
Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server Extensions 2002 and SharePoint Team Services allows remote attackers to inject arbitrary web script or HTML, then leverage the attack to execute arbitrary programs or create new accounts, via the (1) operation, (2) command, and (3) name parameters.
network
microsoft
6.8
2003-12-15 CVE-2003-0824 Unspecified vulnerability in Microsoft products
Unknown vulnerability in the SmartHTML interpreter (shtml.dll) in Microsoft FrontPage Server Extensions 2000 and 2002, and Microsoft SharePoint Team Services 2002, allows remote attackers to cause a denial of service (response failure) via a certain request.
network
low complexity
microsoft
5.0
2003-12-15 CVE-2003-0822 Unspecified vulnerability in Microsoft products
Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to execute arbitrary code via a crafted chunked encoded request.
network
low complexity
microsoft
7.5
2002-10-10 CVE-2002-0692 Buffer Overflow vulnerability in Microsoft products
Buffer overflow in SmartHTML Interpreter (shtml.dll) in Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to cause a denial of service (CPU consumption) or run arbitrary code, respectively, via a certain type of web file request.
network
low complexity
microsoft
7.5
2001-07-21 CVE-2001-0341 Buffer Overflow vulnerability in Microsoft products
Buffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attackers to execute arbitrary commands via a long registration request (URL) to fp30reg.dll.
network
low complexity
microsoft
7.5