Cross-site scripting (XSS) vulnerability in Compaq Insight Management Agents 2.0 2.1 3.6.0 4.2 and 4.3.7 allows remote attackers to inject arbitrary web script or HTML via a URL which inserts the script into the resulting error message.