CVE-2007-6499: Hosting Controller

Medium severity, CVSS 5.5. EPSS: 2.5% chance of exploitation in the next 30 days.

Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to uninstall the FrontPage extensions of an arbitrary account via a request to fp2002/UNINSTAL.asp with a "host id (IIS) value."

Affected products

• Hosting Controller Hosting Controller: up to and including 6.1_hotfix_3.3

Published 2007-12-20. Last modified 2026-06-16.