CVE-2011-2661

The CVE-2011-2661 issue affects Novell GroupWise WebAccess 8.0 prior to HP3. The vulnerability is a cross-site scripting (XSS) flaw in the WebAccess interface, exploitable when the attacker uses the Directory.Item.name or Directory.Item.displayName parameters to inject arbitrary web script/HTML. ...