CVE-2000-0034

Medium

Published: 22/12/1999(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.44%

70th percentile - higher than 70% of all known CVEs

Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not enabled 'remember passwords.'

Stored passwords can be easily accessed by unauthorized individuals, posing a risk of unauthorized access to user accounts.

It is recommended to avoid using Netscape 4.7 or implement additional protective measures to secure the preferences.js file.

Original NVD description (English source)

Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not enabled "remember passwords."