CVE-2010-3263 on Ubuntu 12.04 LTS (precise) - low.
Description:
Cross-site scripting (XSS) vulnerability in setup/frames/index.inc.php in the setup script in phpMyAdmin 3.x before 3.3.7 allows remote attackers to inject arbitrary web script or HTML via a server name.