CVE-2003-0009

Cross-site scripting (XSS) vulnerability in Help and Support Center for Microsoft Windows Me allows remote attackers to execute arbitrary script in the Local Computer security context via an hcp:// URL with the malicious script in the topic parameter.

• http://marc.info/?l=bugtraq&m=104636383018686&w=2
• http://www.ciac.org/ciac/bulletins/n-047.shtml
• http://www.iss.net/security_center/static/11425.phpVendor Advisory
• http://www.kb.cert.org/vuls/id/489721US Government Resource
• http://www.osvdb.org/6074
• http://www.securityfocus.com/bid/6966Patch, Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-006
• http://marc.info/?l=bugtraq&m=104636383018686&w=2
• http://www.ciac.org/ciac/bulletins/n-047.shtml
• http://www.iss.net/security_center/static/11425.phpVendor Advisory
• http://www.kb.cert.org/vuls/id/489721US Government Resource
• http://www.osvdb.org/6074
• http://www.securityfocus.com/bid/6966Patch, Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-006

Published

Mar 7, 2003

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2003-0001Multiple ethernet Network Interface Card (NIC) device driver…
• CVE-2003-0002Cross-site scripting vulnerability (XSS) in ManualLogin.asp …
• CVE-2003-0003Buffer overflow in the RPC Locator service for Microsoft Win…
• CVE-2003-0004Buffer overflow in the Windows Redirector function in Micros…
• CVE-2003-0007Microsoft Outlook 2002 does not properly handle requests to …
• CVE-2003-0010Integer overflow in JsArrayFunctionHeapSort function used by…
• CVE-2003-0011Unknown vulnerability in the DNS intrusion detection applica…
• CVE-2003-0012The data collection script for Bugzilla 2.14.x before 2.14.5…
• CVE-2003-0013The default .htaccess scripts for Bugzilla 2.14.x before 2.1…
• CVE-2003-0014gsinterf.c in bmv 1.2 and earlier allows local users to over…
• CVE-2003-0015Double-free vulnerability in CVS 1.11.4 and earlier allows r…