Dash-3 Vulnerability can lead to hotmail based JS worm.

Code Hotmail Expolit

demo Hijack Passport cookie

demo Steal Hotmail Contact

demo Send Malicious Mail

demo Run IE Exploit/Exe

demo Put and run Trojan

demo Stael User password[fake login],by http-equiv

Respect to Koops,bl, for finding the hole.
Gretting : Menashe Eliezer,Liu Die Yu,thePull,Jelmer,http-equiv,morning wood, Drew Copley,Shlomo Touboul.