Core Security Technologies Advisory - Multiple cross-site scripting vulnerabilities (both stored and reflected) have been found in the web interface of Hyperic HQ, which can be exploited by an malicious user to execute arbitrary JavaScript code in the context of the browser of a legitimate logged in user.
Vulmon