Unknown cross-site scripting (XSS) vulnerability in the web GUI in vHost before 3.10r1 has unknown impact and attack vectors.
https://exchange.xforce.ibmcloud.com/vulnerabilities/15446
http://www.securityfocus.com/bid/9860
http://securitytracker.com/id?1009404