Cross-site scripting (XSS) vulnerability in Hitachi IT Operations Director 02-50-01 through 02-50-07 03-00 through 03-00-04 and possibly other versions before 03-00-06 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.