The effective date of the Anti-Cybersquatting Consumer Protection Act was November 29, 1999. There is some question about whether monetary damages are available for domain names registered prior to that date, but injunctive relief (if you still have the domain name) certainly is available.
It's not clear what you mean by the question, so I'll run through a couple of scenarios.
If you have a domain name which you registered with a bad faith intent to profit from someone else's trademark you *are* cybersquatting. "Cybersquatting" is not solely the act of registering the domain name, but the statute refers to acts of "registers, traffics in, or uses". (See,
http://www4.law.cornell.edu/uscode/15/1125.html at (d)(1)(A)(ii))
So, if you still have the name, then (with the possible exception noted below) you are still cybersquatting as fresh as a daisy today.
But, let's say that you *had* the name, and no longer have it? Are you off the hook? There is no reason to believe that you are. If the TM owner can plausibly argue for damages (or opt for the judge's wheel o' fortune for discretionary statutory damages) accrued during the time that you had it, then the generally applicable time limits of the Lanham Act apply. I could see a situation where A registers the domain name and sells it to B, and then the TM owner sues both A and B. B - to recover the domain name, and A - to disgorge the "unjust enrichment" obtained by unauthorized exploitation of the mark.
But, let's say that you still have the domain name, and that the TM owner has threatened you, but done nothing. In that situation, the general rule of thumb is if you make it to around 6 years, then you have the equitable defense of laches - basically that the TM owner's inaction has given you a reasonable basis to believe that they do not have or would not assert their rights against you.