DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter.
domainmod domainmod 4.09.03