Multiple cross-site scripting (XSS) vulnerabilities in AutoFORM PDM Archive before 6.920 allow remote authenticated users to inject arbitrary web script or HTML via unspecified fields.
http://www.securityfocus.com/bid/53716
http://www.kb.cert.org/vuls/id/MAPG-8RQL83