CVE-2006-0027: Microsoft Exchange Server

High severity, CVSS 7.5. EPSS: 78.7% chance of exploitation in the next 30 days.

Unspecified vulnerability in Microsoft Exchange allows remote attackers to execute arbitrary code via e-mail messages with crafted (1) vCal or (2) iCal Calendar properties.

Affected products

• Microsoft Exchange Server: version 2000 only; version 2003 only

Published 2006-05-10. Last modified 2026-06-16.