CVE-2006-1577

Multiple cross-site scripting XSS vulnerabilities in viewallset.php in Mantis 1.0.1, 1.0.0rc5, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 startday, 2 startyear, and 3 startmonth parameters...