CVE-2007-6477: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the on-line help feature in Citrix Web Interface 2.0 and earlier, and NFuse, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2000-0345: Undefined Security Weakness

The on-line help system options in Cisco routers allows non-privileged users without "enabled" access to obtain sensitive information via the show command...