Vulnerabilities > Microsoft > ISA Server > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2006-07-18 | CVE-2006-3652 | Unspecified vulnerability in Microsoft ISA Server 2004 Microsoft Internet Security and Acceleration (ISA) Server 2004 allows remote attackers to bypass file extension filters via a request with a trailing "#" character. | 7.5 |
| 2005-06-14 | CVE-2005-1216 | Unspecified vulnerability in Microsoft ISA Server 2000 Microsoft ISA Server 2000 allows remote attackers to connect to services utilizing the NetBIOS protocol via a NetBIOS connection with an ISA Server that uses the NetBIOS (all) predefined packet filter. | 7.5 |
| 2005-06-14 | CVE-2005-1215 | Unspecified vulnerability in Microsoft ISA Server 2000 Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content restriction policies via a malformed HTTP request packet containing multiple Content-Length headers. | 7.5 |
| 2005-01-27 | CVE-2004-0892 | Unspecified vulnerability in Microsoft ISA Server, Proxy Server and Windows 2003 Server Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business Server 2000 and Small Business Server 2003 Premium Edition) allows remote attackers to spoof trusted Internet content on a specially crafted webpage via spoofed reverse DNS lookup results. | 7.5 |
| 2002-07-03 | CVE-2002-0371 | Buffer overflow in gopher client for Microsoft Internet Explorer 5.1 through 6.0, Proxy Server 2.0, or ISA Server 2000 allows remote attackers to execute arbitrary code via a gopher:// URL that redirects the user to a real or simulated gopher server that sends a long response. | 7.5 |
| 2001-09-20 | CVE-2001-0658 | Cross-Site Scripting vulnerability in Microsoft ISA Server 2000 Cross-site scripting (CSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause other clients to execute certain script or read cookies via malicious script in an invalid URL that is not properly quoted in an error message. | 7.5 |
| 2001-07-02 | CVE-2001-0239 | Unspecified vulnerability in Microsoft ISA Server 2000 Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request with a specific type. | 7.5 |