CVE-2005-2226: Microsoft Outlook Express

Medium severity, CVSS 5.0. EPSS: 13.4% chance of exploitation in the next 30 days.

Microsoft Outlook Express 6.0 leaks the default news server account when a user responds to a "watched" conversation thread, which could allow remote attackers to obtain sensitive information.

Affected products

• Microsoft Outlook Express: version 6.0 only

Published 2005-07-12. Last modified 2026-06-16.