CVE-2000-0036: Microsoft Ie

Medium severity, CVSS 5.0. EPSS: 3.9% chance of exploitation in the next 30 days.

Outlook Express 5 for Macintosh downloads attachments to HTML mail without prompting the user, aka the "HTML Mail Attachment" vulnerability.

Affected products

• Microsoft Ie: version 4.5 only
• Microsoft Outlook Express: version 5.0 only

Published 1999-12-22. Last modified 2026-06-16.