CVE-2000-0085: Microsoft Hotmail

High severity, CVSS 7.5. EPSS: 14.9% chance of exploitation in the next 30 days.

Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute code via the LOWSRC or DYNRC parameters in the IMG tag.

Affected products

• Microsoft Hotmail: any version

Published 2000-01-04. Last modified 2026-06-16.