Multiple cross-site scripting (XSS) vulnerabilities in HP System Management Homepage (SMH) in HP-UX B.11.11 B.11.23 and B.11.31 and SMH before 2.1.10 for Linux and Windows allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.