CVE-2000-0081: Microsoft Hotmail

High severity, CVSS 10.0. EPSS: 18.9% chance of exploitation in the next 30 days.

Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute the code by using hexadecimal codes to specify the javascript: protocol, e.g. jAvascript.

Affected products

• Microsoft Hotmail: any version

Published 2000-01-10. Last modified 2026-06-16.