Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 6 and 7 and RoboHelp Server 6 and 7 allows remote attackers to inject arbitrary web script or HTML via vectors involving files produced by RoboHelp.