Vulnerabilities > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2000-03-01 | CVE-2000-0201 | Unspecified vulnerability in Microsoft Internet Explorer 5.0/5.01 The window.showHelp() method in Internet Explorer 5.x does not restrict HTML help files (.chm) to be executed from the local host, which allows remote attackers to execute arbitrary commands via Microsoft Networking. | 5.1 |
| 2000-03-01 | CVE-2000-0189 | Unspecified vulnerability in Allaire Coldfusion Server 4.0/4.0.1/4.5 ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files. | 5.0 |
| 2000-02-29 | CVE-2000-0216 | Unspecified vulnerability in Microsoft Exchange Server, Outlook and Windows Messaging Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which could allow an attacker to flood a mail system with responses by forging a Read Receipt request that is redirected to a large distribution list. | 5.0 |
| 2000-02-29 | CVE-2000-0208 | Unspecified vulnerability in Htdig The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks (`) in parameters to htsearch. | 5.0 |
| 2000-02-29 | CVE-2000-0176 | Path Disclosure vulnerability in Serv-U FTP Server The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist. | 5.0 |
| 2000-02-28 | CVE-2000-0179 | Unspecified vulnerability in HP Openview Omniback II 2.55/3.0/3.1 HP OpenView OmniBack 2.55 allows remote attackers to cause a denial of service via a large number of connections to port 5555. | 5.0 |
| 2000-02-25 | CVE-2000-0221 | Unspecified vulnerability in Nortel Nautica Marlin The Nautica Marlin bridge allows remote attackers to cause a denial of service via a zero length UDP packet to the SNMP port. | 5.0 |
| 2000-02-24 | CVE-2000-0220 | Unspecified vulnerability in Zonelabs Zonealarm 2.0.26 ZoneAlarm sends sensitive system and network information in cleartext to the Zone Labs server if a user requests more information about an event. | 5.0 |
| 2000-02-24 | CVE-2000-0217 | The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program. | 5.1 |
| 2000-02-24 | CVE-2000-0212 | Unspecified vulnerability in Pragma Systems Interaccess Telnetd Server 4.0 InterAccess TelnetD Server 4.0 allows remote attackers to conduct a denial of service via malformed terminal client configuration information. | 5.0 |