CVE-2006-3842
Cross-site scripting (XSS) vulnerability in Zoho Virtual Office 3.2 Build 3210 allows remote attackers to execute arbitrary web script or HTML via an HTML message.
Date published : 2006-07-25
http://www.securityfocus.com/bid/19016
http://www.securityfocus.com/archive/1/440417/100/0/threaded