Multiple Cross-site Scripting (XSS) vulnerabilities affecting Sun Java
System Communications Express may allow a remote unprivileged user to
execute arbitrary scripting code within a user's browsing session.

Sun acknowledges, with thanks, Core Security Technologies for bringing
this issue to our attention.