CVE:CVE-2005-4256
CNNVD:CNNVD-200512-306
ASP-DEV XM Forum RC3的forum.asp中存在跨站脚本攻击漏洞，远程攻击者可以通过forum_title参数注入任意Web脚本或HTML。
solution:Upgrade asp-dev xm_forum to a higher version than rc3,and avoid the version rc3