CVE-2000-0710: Microsoft Frontpage

Medium severity, CVSS 5.0. EPSS: 26.4% chance of exploitation in the next 30 days.

The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the server components by requesting an invalid URL whose name includes a standard DOS device name.

Affected products

• Microsoft Frontpage: any version

Published 2000-10-20. Last modified 2026-06-16.