Microsoft Outlook Express 6.0 allows remote attackers to bypass intended access restrictions, load content from arbitrary sources into the Outlook context, and facilitate phishing attacks via a "BASE HREF" with the target set to "_top".
| Software | From | Fixed in |
|---|---|---|
| microsoft / outlook_express | 6.0 | 6.0.x |