CVE-2012-5837 on Ubuntu 12.04 LTS (precise) - medium.
Description:
The Web Developer Toolbar in Mozilla Firefox before 17.0 executes script with chrome privileges, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via a crafted string.