CVE-2007-5280: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in messages.jsp in AppFuse before 2.0 Final allow remote attackers to inject arbitrary web script or HTML via unspecified input that is recorded in 1 success or 2 error messages...