Apache Tomcat versions 4.0.0 to 4.0.6, 4.1.0 to 4.1.34, 5.0.0 to 5.0.30, 5.5.0 to 5.5.20, and 6.0.0 to 6.0.5 suffer from a cross site scripting flaw in Accept-Language header processing.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/57235/CVE-2007-1358.txt
Source: https://packetstormsecurity.com/files/57235/CVE-2007-1358.txt.html