VMware ESX server versions prior to 2.5.2 upgrade patch 2, prior to 2.1.2 upgrade patch 6, and prior to 2.0.1 upgrade patch 6 suffer from a cross site scripting issue.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/47003/vmwareXSS.txt
Source: https://packetstormsecurity.com/files/47003/vmwareXSS.txt.html