Microsoft SharePoint Server fails to sanitize crafted web requests, allowing remote attackers to run cross-script in local security context, aka “Microsoft SharePoint XSS Vulnerability.”