In Intland codeBeamer ALM 9.5 and previous versions, there is stored XSS via the Trackers Title parameter.
intland codebeamer