Multiple possibilities for crossite scripting and data spoofing.
vulners.com/securityvulns/securityvulns:doc:7766