Unspecified vulnerability in Walter Zorn wz_tooltip.js (aka wz_tooltips) before 4.01, as used by eGroupWare before 1.2.107-2 and other packages, has unknown impact and remote attack vectors.
https://exchange.xforce.ibmcloud.com/vulnerabilities/34913
http://www.walterzorn.com/tooltip/history.htm
http://www.securityfocus.com/bid/24378
http://sourceforge.net/project/shownotes.php?release_id=513749&group_id=78745
http://sourceforge.net/project/shownotes.php?release_id=513311&group_id=78745