Most Exploitable CVEs of 1996

CVE-1999-0070

test-cgi program allows an attacker to list files on the server.
almost 25 years ago

CVE-1999-0233

IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files.
about 25 years ago