Commerce Server (Microsoft) - vulnerabilities (CVEs)
9 CVEs, 0 in the last 30 days, 10 known versions, newest CVE from 2012-08-15. Vendor: Microsoft.
CVEs of Commerce Server
- CVE-2012-1856 - CVSS 8.8 (high), 2012-08-15: The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3,…
- CVE-2012-0158 - CVSS 8.8 (high), 2012-04-10: The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls in Microsoft Office 2003 SP3, 2007…
- CVE-2007-1201 - CVSS 9.3 (critical), 2008-03-11: Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via…
- CVE-2006-1257 - CVSS 7.5 (high), 2006-03-19: The sample files in the authfiles directory in Microsoft Commerce Server 2002 before SP2 allow remote attackers to bypass authentication by logging in to…
- CVE-2002-0622 - CVSS 7.5 (high), 2002-07-03: The Office Web Components (OWC) package installer for Microsoft Commerce Server 2000 allows remote attackers to execute commands by passing the commands as…
- CVE-2002-0621 - CVSS 5 (medium), 2002-07-03: Buffer overflow in the Office Web Components (OWC) package installer used by Microsoft Commerce Server 2000 allows remote attackers to cause the process to…
- CVE-2002-0620 - CVSS 5 (medium), 2002-07-03: Buffer overflow in the Profile Service of Microsoft Commerce Server 2000 allows remote attackers to cause the server to fail or run arbitrary code in the…
- CVE-2002-0623 - CVSS 7.5 (high), 2002-07-03: Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 and 2002 allows remote attackers to execute arbitrary code via long…
- CVE-2002-0050 - CVSS 7.5 (high), 2002-03-08: Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 allows remote attackers to execute arbitrary code via long authentication data.