Crossite scripting on HTML help pages.
vulners.com/securityvulns/securityvulns:doc:16366
vulners.com/securityvulns/securityvulns:doc:16367