CVE-2005-1388
Cross-site scripting (XSS) vulnerability in SURVIVOR before 0.9.6 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Date published : 2005-05-02
http://www.securityfocus.com/bid/13415
http://www.columbia.edu/acis/dev/projects/survivor/doc/todo.html#changelog