ow.asp in OpenWiki version 0.78 is susceptible to cross site scripting.
b162a9916f44ca291b9578d8fbd14a2d8df097fd956581be4f020ddff8d03321
IceWarp is susceptible to cross site scripting attacks via the PHPSESSID variable.
1bb341fa52e57e2264f9b7ac098e7c7859cf19f059b9ded04d722cbe4b17385d