CVE-2007-3109: Microsoft Frontpage

Medium severity, CVSS 6.4. EPSS: 10.9% chance of exploitation in the next 30 days.

The CERN Image Map Dispatcher (htimage.exe) in Microsoft FrontPage allows remote attackers to determine the existence, and possibly partial contents, of arbitrary files under the web root via a relative pathname in the PATH_INFO.

Affected products

• Microsoft Frontpage: any version
• Microsoft Office: any version

Published 2007-06-07. Last modified 2026-06-16.