CVE		CVE-2007-3693
Status		Candidate
Description		Cross-site scripting (XSS) vulnerability in Gobi as of 20070711, built on Helma, allows remote attackers to inject arbitrary web script or HTML via the q parameter to the search function.
Phase		Assigned (11.07.2007)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-3693
References		MISC : http://int21.de/cve/CVE-2007-3693-gobi.txt
SecurityVulns:		Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)