CVE-2007-0938: Microsoft Content Management Server

High severity, CVSS 10.0. EPSS: 45.6% chance of exploitation in the next 30 days.

Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 does not properly handle certain characters in a crafted HTTP GET request, which allows remote attackers to execute arbitrary code, aka the "CMS Memory Corruption Vulnerability."

Affected products

• Microsoft Content Management Server: version 2001 only; version 2002 only

Published 2007-04-10. Last modified 2026-06-16.