CVE:CVE-2007-3017
CNNVD:CNNVD-200707-283
activeWeb contentserver CMS 5.6.2964版本之前的版本的WYSIWYG editor applet只会过滤掉发送至admin/applets/wysiwyg/rendereditor.asp的恶意标签，这会允许远程验证用户可以借助对admin/worklist/worklist_edit.asp提交的直接请求，注入任意JavaScript。
solution:Upgrade activeweb contentserver to a higher version than 5.6.2929,and avoid the version (,5.6.2929]