All versions of the Horde IMP Webmail client are susceptible to cross site scripting attacks.
2f7f5467ab0ea3513404404714c47e38d96ce191db569f9075bc9f24d75ac16d
Microsoft Registry Editor for Windows 2000 and XP has a nice design flaw that allows for the hiding of registry information.
c896ffe333e77dd73bc446724ae93cef2d2918ef54a1c493db3c3ec04bf68e02
PhotoPost 5.0RC3 is susceptible to SQL injection, arbitrary file upload, cross site scripting, and various manipulation flaws.
0b6ed983b076ee2d4747a046aec2414e2cdc85fe6b5b11e5af9bf5f2cb0512b8