CVE-2003-0009: Microsoft Windows Me

Medium severity, CVSS 6.8. EPSS: 16.5% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Help and Support Center for Microsoft Windows Me allows remote attackers to execute arbitrary script in the Local Computer security context via an hcp:// URL with the malicious script in the topic parameter.

Affected products

• Microsoft Windows Me: any version
• Microsoft Windows XP: any version

Published 2003-03-07. Last modified 2026-06-16.