Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute the code by using hexadecimal codes to specify the javascript: protocol, e.g. jAvascript.
| Software | From | Fixed in |
|---|---|---|
| microsoft / hotmail | - | - |