All packages
Hotmail vulnerabilities
3 known CVE vulnerabilities in Hotmail, translated and rated.
- CVE-2000-0081High
Hotmail does not properly filter JavaScript code from a user's mailbox, allowing a remote attacker to execute the code using hexadecimal codes to specify the javascript: protocol.
- CVE-2000-0085High
Hotmail does not properly filter JavaScript code from a user's mailbox, allowing a remote attacker to execute code via the LOWSRC or DYNRC parameters in the IMG tag.
- CVE-1999-0750Medium
Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to execute commands on the user's Hotmail account.