Cross-site scripting (XSS) vulnerability in FeedDemon before 4.0, when the feed preview option is enabled, allows remote attackers to inject arbitrary web script or HTML via a feed. Rated low severity (CVSS 2.6), this vulnerability is remotely exploitable. No vendor patch available.
SEIL routers with firmware SEIL/x86 1.00 through 2.35, SEIL/X1 2.30 through 3.75, SEIL/X2 2.30 through 3.75, and SEIL/B1 2.30 through 3.75, when the http-proxy and application-gateway features are. Rated low severity (CVSS 2.6), this vulnerability is remotely exploitable. No vendor patch available.