Palms version 3.6 suffers from a cross site scripting vulnerability…. Palms version 3.6 suffers from a cross site scripting vulnerability.

Read more http://packetstormsecurity.com/files/123054/palms-xss.txt