diff --git a/doc/changes.html b/doc/changes.html
index 8fff9bb6..d1f2c5b0 100644
--- a/doc/changes.html
+++ b/doc/changes.html
@@ -25,7 +25,7 @@
 
   <ul>
     <li><strong>Security fix</strong>: Windows - remove trailing dots in URI. <br /> A quirk in the Windows API made it possible to request the raw stylesheet file from webroot. Only XSLT files are affected, no internal state data is available this way. <br /> This addresses CVE-2005-0837 (sic!), which was sadly ignored after the initial ticket got closed erroneously.</li>
-    <li>Expected impact is low: most installations run with default XSLT files and there is nothing new to be learned in such a case. Also a majority of production Icecast servers don't run on Windows to start with.</li>
+    <li><strong>Expected impact is low</strong>: most installations run with default XSLT files and there is nothing new to be learned in such a case. Also a majority of production Icecast servers don't run on Windows to start with.</li>
     <li><strong>Linux/Unix installations were never affected, this is a Windows only release!</strong></li>
     </li>
   </ul>