Cross Site Scripting Exposure in McAfee True Key (TK) 4.0.0.0 and previous versions allows local users to expose confidential data via a crafted web site.
mcafee true key