Barracuda Networks Message Archiver 650 suffers from client-side cross site scripting vulnerabilities.