CVE-2001-1325: Microsoft Internet Explorer

High severity, CVSS 7.5. EPSS: 27.3% chance of exploitation in the next 30 days.

Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute scripts when Active Scripting is disabled by including the scripts in XML stylesheets (XSL) that are referenced using an IFRAME tag, possibly due to a vulnerability in Windows Scripting Host (WSH).

Affected products

• Microsoft Internet Explorer: version 5.0 only; version 5.5 only
• Microsoft Outlook Express: version 5.0 only; version 5.5 only

Published 2001-04-20. Last modified 2026-06-16.