CVE-2011-4632 on Ubuntu 12.04 LTS (precise) - medium.
Description:
Failing to properly sanitize a page title the tcemain flash message is susceptible to Cross-Site Scripting. Exploiting requires an attacker to prepare a page and trick its victim to copy/move the prepared page.