# Microsoft Internet Information Server


- [CVE-2008-0075](https://insights.sbomify.com/CVE-2008-0075/): Code injection in n/a (critical 10.0)
- [CVE-2001-0500](https://insights.sbomify.com/CVE-2001-0500/): Memory corruption in n/a (critical 10.0)
- [CVE-1999-1376](https://insights.sbomify.com/CVE-1999-1376/): Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers to execute arbitrary commands. (critical 10.0)
- [CVE-1999-0407](https://insights.sbomify.com/CVE-1999-0407/): By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or (critical 10.0)
- [CVE-1999-0874](https://insights.sbomify.com/CVE-1999-0874/): Memory corruption in n/a (critical 10.0)
- [CVE-1999-1011](https://insights.sbomify.com/CVE-1999-1011/): Command injection in n/a (critical 10.0)
- [CVE-2009-3023](https://insights.sbomify.com/CVE-2009-3023/): Memory corruption in n/a (critical 9.0)
- [CVE-2010-1256](https://insights.sbomify.com/CVE-2010-1256/): Memory corruption in n/a (high 8.5)
- [CVE-2007-0087](https://insights.sbomify.com/CVE-2007-0087/): Denial of service in n/a (high 7.8)
- [CVE-1999-0449](https://insights.sbomify.com/CVE-1999-0449/): Denial of service in n/a (high 7.8)
- [CVE-1999-1591](https://insights.sbomify.com/CVE-1999-1591/): Microsoft Internet Information Services (IIS) server 4.0 SP4, without certain hotfixes released for SP4, does not require authentication cre (high 7.5)
- [CVE-2007-2897](https://insights.sbomify.com/CVE-2007-2897/): Microsoft Internet Information Services (IIS) 6.0 allows remote attackers to cause a denial of service (server instability or device hang), (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/products/microsoft/internet-information-server/