Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product Outlook Express
Total 45 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2001-0945 1 Microsoft 1 Outlook Express 2025-04-03 5.0 MEDIUM N/A
Buffer overflow in Outlook Express 5.0 through 5.02 for Macintosh allows remote attackers to cause a denial of service via an e-mail message that contains a long line.
CVE-1999-1016 2 Microsoft, Qualcomm 4 Frontpage, Internet Explorer, Outlook Express and 1 more 2025-04-03 5.0 MEDIUM N/A
Microsoft HTML control as used in (1) Internet Explorer 5.0, (2) FrontPage Express, (3) Outlook Express 5, and (4) Eudora, and possibly others, allows remote malicious web site or HTML emails to cause a denial of service (100% CPU consumption) via large HTML form fields such as text inputs in a table cell.
CVE-2001-0999 1 Microsoft 1 Outlook Express 2025-04-03 7.5 HIGH N/A
Outlook Express 6.00 allows remote attackers to execute arbitrary script by embedding SCRIPT tags in a message whose MIME content type is text/plain, contrary to the expected behavior that text/plain messages will not run script.
CVE-2000-0653 1 Microsoft 1 Outlook Express 2025-04-03 5.0 MEDIUM N/A
Microsoft Outlook Express allows remote attackers to monitor a user's email by creating a persistent browser link to the Outlook Express windows, aka the "Persistent Mail-Browser Link" vulnerability.
CVE-2000-0567 1 Microsoft 2 Outlook, Outlook Express 2025-04-03 5.0 MEDIUM N/A
Buffer overflow in Microsoft Outlook and Outlook Express allows remote attackers to execute arbitrary commands via a long Date field in an email header, aka the "Malformed E-mail Header" vulnerability.