For the complete article read, http://blogs.hackerscenter.com/dcrab/?p=19=0D 
=0D
Amazon.com: One of the largest e-commerce websites in the world. It is vulnerable to CR LF injection vulnerabilities, that allow an exploitable XSS situation to exist=0D
=0D
Screenshot:=0D
=0D
http://blogs.hackerscenter.com/dcrab/amazon.jpg=0D 
=0D
Msn: I have worked with microsoft on several occassions and found it a huge drag to work with thier slow security response center. I found about 4 - 5 vulnerabilities on various websites in the microsoft network, and reported them in to the Microsoft Security Center. It=92s been almost a year since, and 2 of them are fixed, The others still exist. These are completely exploitable as XSS vulnerabilities too.=0D
=0D
Screenshot:=0D
=0D
http://blogs.hackerscenter.com/dcrab/msn.jpg