Multiple cross-site scripting (XSS) vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary web script or HTML via the (1) LAN_407 parameter to clock_menu.php (2) \email article to a friend\ field (3) \submit news\ field or (4) avmsg parameter to usersettings.php.