What’s Vulnerable › Vulnerabilities

CVE-2007-4356

• Severity: critical (CVSS 9.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2007-08-15 · updated 2026-06-16

Description

Microsoft Internet Explorer 6 and 7 embeds FTP credentials in HTML files that are retrieved during an FTP session, which allows context-dependent attackers to obtain sensitive information by reading the HTML source, as demonstrated by a (1) .htm, (2) .html, or (3) .mht file.

Affected products

• Microsoft Internet Explorer 11: 6, 7

References

• http://blog.washingtonpost.com/securityfix/2007/08/ftp_files_expose_web_site_cred.html
• http://osvdb.org/36400
• http://secunia.com/advisories/26427
• http://blog.washingtonpost.com/securityfix/2007/08/ftp_files_expose_web_site_cred.html
• http://osvdb.org/36400
• http://secunia.com/advisories/26427

Get alerted when CVE-2007-4356 or the next vulnerability affects your stack