Crossite scripting on message reading.
vulners.com/securityvulns/securityvulns:doc:13141
vulners.com/securityvulns/securityvulns:doc:13157