CVE-2007-2804
CVE-2007-2804: Multiple XSS vulnerabilities in CandyPress Store 3.5.2.14 and earlier. Affected component: scripts/prodList.asp. Vulnerable vectors: (1) brand and (2) Msg parameters. Remote attackers can inject arbitrary web script or HTML.