CVE-2014-3960
Multiple cross-site scripting (XSS) vulnerabilities in OpenNMS before 1.12.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Date published : 2014-06-04
http://www.securityfocus.com/bid/67774
http://www.opennms.org/documentation/ReleaseNotesStable.html#opennms-1.12.7