/search/index.cfm allows insert HTML tags via search paramter.
vulners.com/securityvulns/securityvulns:doc:4071