Pro2col StingRay FTS suffers from a cross site scripting vulnerability via the login username functionality.