The mod_proxy_ftp module of the Apache HTTP Server is vulnerable to a cross-site scripting vulner...

http://www.securiteam.com/unixfocus/5VP0K2KP6I.html