CVE-2001-1325: Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute scripts w...

Security readout for executives and security teams

This issue affects very old Internet Explorer and Outlook Express versions. A malicious web page or email could run script even when Active Scripting was disabled, undermining a control administrators may have trusted. Business risk is mainly for environments that still preserve legacy Windows client stacks. Exposure is most plausible on legacy endpoints or isolated business systems still using Internet Explorer 5.0/5.5 or Outlook Express 5.0/5.5. Modern supported browsers and mail clients are not identified as affected in the provided sources. Prioritize this as a legacy-exposure cleanup item. It is not KEV-listed in the bundle, but affected systems would carry outsized risk because a disabled scripting setting may not protect users. Mitigation focus: Inventory and retire Internet Explorer 5.0/5.5 and Outlook Express 5.0/5.5 installations.; Check Microsoft or vendor guidance for historical fixes or compensating controls.; Do not rely on disabled Active Scripting as the only protection for affected clients..

Prepared

Jul 1, 2026, 07:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.