CVE-2007-2847: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in hlstats.php in HLstats 1.35, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 authusername or 2 authpassword parameter, different vectors than CVE-2007-0840 and CVE-2007-2812...