flv-player versions 3.5 and below suffer from cross site scripting and content spoofing vulnerabilities…. flv-player versions 3.5 and below suffer from cross site scripting and content spoofing vulnerabilities.

Read more http://packetstormsecurity.com/files/123559/flvplayer35-xss.txt