CVE-2005-2830: Microsoft Ie

Medium severity, CVSS 5.0. EPSS: 35.5% chance of exploitation in the next 30 days.

Microsoft Internet Explorer 5.01, 5.5, and 6, when using an HTTPS proxy server that requires Basic Authentication, sends URLs in cleartext, which allows remote attackers to obtain sensitive information, aka "HTTPS Proxy Vulnerability."

Affected products

• Microsoft Ie: version 6.0 only
• Microsoft Internet Explorer: version 5.0.1 only; version 5.5 only; version 6.0 only

Published 2005-12-14. Last modified 2026-06-16.