Vulnerability Details CVE-2007-4356
Microsoft Internet Explorer 6 and 7 embeds FTP credentials in HTML files that are retrieved during an FTP session, which allows context-dependent attackers to obtain sensitive information by reading the HTML source, as demonstrated by a (1) .htm, (2) .html, or (3) .mht file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.283
EPSS Ranking 96.3%
CVSS Severity
CVSS v2 Score 9.3
References
Products affected by CVE-2007-4356
-
cpe:2.3:a:microsoft:internet_explorer:6
-
cpe:2.3:a:microsoft:internet_explorer:7