CVE-2007-2225

no score yetEPSS 25%

microsoft: no CVSS score yet. EPSS 25% chance of exploitation in the next 30 days.

A component in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle certain HTTP headers when processing MHTML protocol URLs, which allows remote attackers to obtain sensitive information from other Internet Explorer domains, aka "URL Parsing Cross Domain Information Disclosure Vulnerability."

EPSS: 25% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
Published: 2007-06-12
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

microsoft:outlook_express
microsoft:windows_mail

References

http://archive.openmya.devnull.jp/2007.06/msg00060.html
http://openmya.hacker.jp/hasegawa/security/ms07-034.txt
http://osvdb.org/35345
http://secunia.com/advisories/25639
http://www.kb.cert.org/vuls/id/682825

Check your stack JSON