Cross-site scripting (XSS) vulnerability in the HTTP Protocol Stack (HTTPSTK) in Novell eDirectory before 8.8 SP3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
https://exchange.xforce.ibmcloud.com/vulnerabilities/46667
http://www.vupen.com/english/advisories/2008/2462
http://www.securitytracker.com/id?1020785
http://www.securityfocus.com/bid/30947
http://www.novell.com/support/viewContent.do?externalId=3426981