Cross-site scripting vulnerability in Snitz Forums 2000 3.3.03 and earlier allows remote attackers to execute arbitrary script as other Forums 2000 users via Javascript in an IMG tag.
http://www.securityfocus.com/bid/4192
http://www.kb.cert.org/vuls/id/132011