RMSOFT Downloads Plus versions 1.5 and 1.7 suffer from multiple cross site scripting vulnerabilities.