Java.com suffered from multiple cross site scripting vulnerabilities.