CVE-2007-2880: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Digirez 3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 Roomname parameter to room/infobook.asp or the 2 curYear parameter to room/week.asp...