Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i (NNMi) 8.x, 9.0x, 9.1x, and 9.20 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03405705