CVE-2007-0939

no score yetEPSS 16%

microsoft content management server: no CVSS score yet. EPSS 16% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving HTML redirection queries, aka "Cross-site Scripting and Spoofing Vulnerability."

EPSS: 16% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
Published: 2007-04-10
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

microsoft:content_management_server

References

http://secunia.com/advisories/24819
http://www.osvdb.org/34007
http://www.securityfocus.com/archive/1/466331/100/200/threaded
http://www.securityfocus.com/bid/22860
http://www.securitytracker.com/id?1017894

Check your stack JSON