c. arguments to most common features of the product or product class
2) XSS using well-formed SCRIPT tags, especially in the:
a. username/password of an authentication routine
b. body, subject, title, or to/from of a message