Drupal security advisory – Drupal versions 4.7.x before version 4.7.7 and 5.x versions before version 5.2 suffer from cross site scripting vulnerabilities.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/58178/DRUPAL-SA-2007-018.txt
Source: https://packetstormsecurity.com/files/58178/DRUPAL-SA-2007-018.txt.html