The host is installed with Adobe RoboHelp Word 8 or 9 and is prone to multiple cross-site scripting (XSS) vulnerabilities. The flaws are present in Adobe RoboHelp for Word, which fails to handle a crafted URL. Successful exploitation allows remote attackers to inject arbitrary web script or HTML.