Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2000-01-07	CVE-2000-0061	Unspecified vulnerability in Microsoft Internet Explorer Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document has been loaded, which could allow remote attackers to execute Javascript in a different security context while the document is loading. network low complexity microsoft critical	10.0
1999-07-19	CVE-1999-1011	Permissions, Privileges, and Access Controls vulnerability in Microsoft products The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands. network low complexity microsoft CWE-264 critical	10.0
1999-05-17	CVE-1999-0489	Unspecified vulnerability in Microsoft Windows NT 4.0 MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of "untrusted scripted paste" as described in MS:MS98-013. network low complexity microsoft critical	10.0
1999-05-06	CVE-1999-1241	Unspecified vulnerability in Microsoft Internet Explorer 6.0.2900 Internet Explorer, with a security setting below Medium, allows remote attackers to execute arbitrary commands via a malicious web page that uses the FileSystemObject ActiveX object. network low complexity microsoft critical	10.0
1999-02-09	CVE-1999-0407	Unspecified vulnerability in Microsoft Internet Information Server 4.0 By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system. network low complexity microsoft critical	10.0
1999-01-19	CVE-1999-0119	Unspecified vulnerability in Microsoft Windows NT 4.0 Windows NT 4.0 beta allows users to read and delete shares. network low complexity microsoft critical	10.0
1999-01-14	CVE-1999-1376	Unspecified vulnerability in Microsoft Internet Information Server 4.0 Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers to execute arbitrary commands. network low complexity microsoft critical	10.0
1999-01-01	CVE-1999-0581	Unspecified vulnerability in Microsoft Windows NT The HKEY_CLASSES_ROOT key in a Windows NT system has inappropriate, system-critical permissions. network low complexity microsoft critical	10.0
1999-01-01	CVE-1999-0579	Unspecified vulnerability in Microsoft Windows NT A Windows NT system's registry audit policy does not log an event success or failure for non-critical registry keys. network low complexity microsoft critical	10.0
1999-01-01	CVE-1999-0577	Unspecified vulnerability in Microsoft Windows NT A Windows NT system's file audit policy does not log an event success or failure for non-critical files or directories. network low complexity microsoft critical	10.0