CVE-2010-0640
Cross-site scripting (XSS) vulnerability in CA eHealth Performance Manager 6.0.x through 6.2.x, when malicious HTML detection is disabled, allows remote attackers to inject arbitrary web script or HTML via a crafted request.
Date published : 2010-02-24
http://www.securityfocus.com/bid/38376
http://www.securityfocus.com/archive/1/509714/100/0/threaded