CVE-2007-4900
Cross-site scripting (XSS) vulnerability in the logon page in RSA EnVision 3.3.6 Build 0115 allows remote attackers to inject arbitrary web script or HTML via the username field.
Date published : 2007-09-14
http://www.securityfocus.com/bid/25645
http://www.securityfocus.com/archive/1/479183/100/0/threaded