Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2000 SP1 through SP3 when running Outlook Web Access (OWA) allows user-assisted remote attackers to inject arbitrary HTML or web script via unknown vectors related to \HTML parsing.\