CVE-2006-1193

The record

Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2000 SP1 through SP3, when running Outlook Web Access (OWA), allows user-assisted remote attackers to inject arbitrary HTML or web script via unknown vectors related to "HTML parsing."

Affected packages

Related vulnerabilities

• CVE-2026-56858 Previously, pathological inputs could close an unescaped '/' early, allowing for… CWE-79
• CVE-2026-73650 SVGO, short for SVG Optimizer, is a Node.js library and command-line application for… CWE-79
• CVE-2026-73648 rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. CWE-79
• CVE-2026-73490 Loofah is a general library for manipulating and transforming HTML/XML documents and… CWE-79
• CVE-2026-71497 jsoup is a Java library for working with real-world HTML. CWE-79
• CVE-2026-69149 Angular is a development platform for building mobile and desktop web applications using… CWE-79
• CVE-2026-69151 Angular is a development platform for building mobile and desktop web applications using… CWE-79
• CVE-2026-48060 Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. CWE-79