A number of XSS holes found during QA bltiz

See Mark H and Coreys blitz pages for details...