Sending an infected ZIP archive with a filename containing HTML or Javascript may allow for a Cross-site scripting attack to be performed.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33709/screenos-av-xss-2.txt
Source: https://packetstormsecurity.com/files/33709/screenos-av-xss-2.txt.html