# Microsoft Internet Information Services


- [CVE-2017-7269](https://insights.sbomify.com/CVE-2017-7269/): Microsoft Windows Server Buffer Overflow (critical 9.8, exploited in the wild)
- [CVE-2010-3972](https://insights.sbomify.com/CVE-2010-3972/): Memory corruption in n/a (critical 10.0)
- [CVE-2008-4301](https://insights.sbomify.com/CVE-2008-4301/): Other in n/a (critical 10.0)
- [CVE-2007-2815](https://insights.sbomify.com/CVE-2007-2815/): The "hit-highlighting" functionality in webhits.dll in Microsoft Internet Information Services (IIS) Web Server 5.0 only uses Windows NT ACL (critical 10.0)
- [CVE-2003-0224](https://insights.sbomify.com/CVE-2003-0224/): Buffer overflow in ssinc.dll for Microsoft Internet Information Services (IIS) 5.0 allows local users to execute arbitrary code via a web pa (critical 10.0)
- [CVE-1999-0233](https://insights.sbomify.com/CVE-1999-0233/): IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files. (critical 10.0)
- [CVE-2010-2730](https://insights.sbomify.com/CVE-2010-2730/): Memory corruption in n/a (critical 9.3)
- [CVE-2008-1446](https://insights.sbomify.com/CVE-2008-1446/): Integer overflow in n/a (critical 9.0)
- [CVE-2005-4360](https://insights.sbomify.com/CVE-2005-4360/): The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitr (high 7.8)
- [CVE-2009-1122](https://insights.sbomify.com/CVE-2009-1122/): The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode URLs, which allows re (high 7.5)
- [CVE-2009-1535](https://insights.sbomify.com/CVE-2009-1535/): Auth bypass in n/a (high 7.5)
- [CVE-2003-1567](https://insights.sbomify.com/CVE-2003-1567/): The undocumented TRACK method in Microsoft Internet Information Services (IIS) 5.0 returns the content of the original request in the body o (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/products/microsoft/internet-information-services/