Multiple cross-site scripting (XSS) vulnerabilities in the Web UI in Xymon before 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
osvdb.org/71489
secunia.com/advisories/44036
securityreason.com/securityalert/8209
www.securityfocus.com/archive/1/517316/100/0/threaded
www.securityfocus.com/archive/1/517325/100/0/threaded
www.securityfocus.com/bid/47156
xymon.svn.sourceforge.net/viewvc/xymon/branches/4.3.2/Changes?revision=6673&view=markup
exchange.xforce.ibmcloud.com/vulnerabilities/66542