CVE-2001-0726

Outlook Web Access (OWA) in Microsoft Exchange 5.5 Server, when used with Internet Explorer, does not properly detect certain inline script, which can allow remote attackers to perform arbitrary actions on a user's Exchange mailbox via an HTML e-mail message.

• http://www.osvdb.org/5557Broken Link
• http://www.securityfocus.com/bid/3650Third Party Advisory, VDB Entry
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-057Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7663Third Party Advisory, VDB Entry
• http://www.osvdb.org/5557Broken Link
• http://www.securityfocus.com/bid/3650Third Party Advisory, VDB Entry
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-057Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7663Third Party Advisory, VDB Entry

Published

Dec 6, 2001

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2001-0719Buffer overflow in Microsoft Windows Media Player 6.4 allows…
• CVE-2001-0720Internet Explorer 5.1 for Macintosh on Mac OS X allows remot…
• CVE-2001-0721Universal Plug and Play (UPnP) in Windows 98, 98SE, ME, and …
• CVE-2001-0722Internet Explorer 5.5 and 6.0 allows remote attackers to rea…
• CVE-2001-0723Internet Explorer 5.5 and 6.0 allows remote attackers to rea…
• CVE-2001-0724Internet Explorer 5.5 allows remote attackers to bypass secu…
• CVE-2001-0727Internet Explorer 6.0 allows remote attackers to execute arb…
• CVE-2001-0728Buffer overflow in Compaq Management Agents before 5.2, incl…
• CVE-2001-0729Apache 1.3.20 on Windows servers allows remote attackers to …
• CVE-2001-0730split-logfile in Apache 1.3.20 allows remote attackers to ov…
• CVE-2001-0731Apache 1.3.20 with Multiviews enabled allows remote attacker…
• CVE-2001-0733The #sinclude directive in Embedded Perl (ePerl) 2.2.14 and …