Cross-site scripting (XSS) vulnerability in RaidenHTTPD 2.0.19 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the ulang parameter.
http://www.vupen.com/english/advisories/2008/0411
http://www.securityfocus.com/bid/27628
http://www.raidenhttpd.com/jp/security.html