XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone \/netflow/jspui/index.jsp\ file in the view GET parameter or any of these POST parameters: autorefTime section snapshot viewOpt viewAll view or groupSelName. The latter is related to CVE-2009-3903.