Vulnerabilities > Microsoft > Windows ME

DATE CVE VULNERABILITY TITLE RISK
2001-12-06 CVE-2001-0721 Unspecified vulnerability in Microsoft products
Universal Plug and Play (UPnP) in Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service (memory consumption or crash) via a malformed UPnP request.
network
low complexity
microsoft
5.0
2001-07-02 CVE-2001-0238 Unspecified vulnerability in Microsoft products
Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass Security Zone restrictions via WebDAV requests.
network
low complexity
microsoft
7.5
2001-02-12 CVE-2001-0003 Unspecified vulnerability in Microsoft products
Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Explorer security settings for NTLM authentication, which allows attackers to obtain NTLM credentials and possibly obtain the password, aka the "Web Client NTLM Authentication" vulnerability.
network
low complexity
microsoft
5.0
2001-01-09 CVE-2000-1039 Unspecified vulnerability in Microsoft products
Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target host with TCP connection attempts and completing the TCP/IP handshake without maintaining the connection state on the attacker host, aka the "NAPTHA" class of vulnerabilities.
network
low complexity
microsoft
5.0
2000-12-19 CVE-2000-0980 Unspecified vulnerability in Microsoft products
NMPI (Name Management Protocol on IPX) listener in Microsoft NWLink does not properly filter packets from a broadcast address, which allows remote attackers to cause a broadcast storm and flood the network.
network
low complexity
microsoft
5.0
2000-12-19 CVE-2000-0979 Unspecified vulnerability in Microsoft products
File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers to bypass share access controls by sending a 1-byte password that matches the first character of the real password, aka the "Share Level Password" vulnerability.
network
low complexity
microsoft
6.4