Digit-Labs Security Advisory - Microsoft Visual Studio .NET on all VS.NET platforms creates a file called *.vbproj in the Web root directory which reveals the web site file structure.
5e23baba88cdc73cc30dbc3a80d757303ef3061270ab40c1edfd68b399e7b62e
Digit-Labs Security Advisory DLA-25-06-2002 - Microsoft Internet Information Server 5.0 Administration Web Site redirect proof of concept exploit.
e40dcfcc6dabff8f35bea63000df3a5800f306c939003f143fe14a75edeb7bc2
Microsoft posted a security bulletin on this (ms99-040) way back in September 28, 1999; it is still exploitable if the html file is run from the users local disk and not from a webserver or file-share.
8ffd9671f0b9be7cb6bdf03ca7f71dbd7b5e1f5919523c3959581dcf7e7832de