CVE-2001-0726

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Outlook Web Access (OWA) in Microsoft Exchange 5.5 Server, when used with Internet Explorer, does not properly detect certain inline script, which can allow remote attackers to perform arbitrary actions on a user's Exchange mailbox via an HTML e-mail message.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.osvdb.org/5557Broken Link
http://www.securityfocus.com/bid/3650Third Party Advisory, VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-057Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7663Third Party Advisory, VDB Entry
http://www.osvdb.org/5557Broken Link
http://www.securityfocus.com/bid/3650Third Party Advisory, VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-057Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7663Third Party Advisory, VDB Entry

Timeline

Published: Dec 6, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-07277.5Internet Explorer 6.0 allows remote attackers to execute arbitrary code by modifying the Content-Disposition and Content-Type header fields CVE-2001-07284.6Buffer overflow in Compaq Management Agents before 5.2, included in Compaq Web-enabled Management Software, allows local users to gain privi CVE-2001-07295.0Apache 1.3.20 on Windows servers allows remote attackers to bypass the default index page and list directory contents via a URL with a large CVE-2001-07305.0split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via an HTTP request with CVE-2001-07315.0Apache 1.3.20 with Multiviews enabled allows remote attackers to view directory contents and bypass the index page via a URL containing the CVE-2001-07337.5The #sinclude directive in Embedded Perl (ePerl) 2.2.14 and earlier allows a remote attacker to execute arbitrary code by modifying the 'sin CVE-2001-07347.2Hitachi Super-H architecture in NetBSD 1.5 and 1.4.1 allows a local user to gain privileges via modified Status Register contents, which are CVE-2001-07357.2Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOW_LINE_PARSING option enabled allows local users to execute arbitrary code via a CVE-2001-07362.1Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary fil CVE-2001-07377.5A long 'synch' delay in Logitech wireless mice and keyboard receivers allows a remote attacker to hijack connections via a man-in-the-middle CVE-2001-07385.0LogLine function in klogd in sysklogd 1.3 in various Linux distributions allows an attacker to cause a denial of service (hang) by causing n CVE-2001-07397.2Guardian Digital WebTool in EnGarde Secure Linux 1.0.1 allows restarted services to inherit some environmental variables, which could allow