Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2000 SP1 through SP3, when running Outlook Web Access (OWA), allows user-assisted remote attackers to inject arbitrary HTML or web script via unknown vectors related to "HTML parsing."
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-029
No PoCs found on GitHub currently.