Security Advisory
CVE-2000-0085
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute code via the LOWSRC or DYNRC parameters in the IMG tag.