Cross-site scripting (XSS) vulnerability in the FTP view feature in Mozilla 1.0 allows remote attackers to inject arbitrary web script or HTML via the title tag of an ftp URL.Referenceshttp://www.securityfocus.com/bid/5403http://bugzilla.mozilla.org/show_bug.cgi?id=154030http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0060.htmlhttp://www.iss.net/security_center/static/9757.php