WebCT Campus Edition version 4.1.5.8 suffers from multiple javascript related session stealing vulnerabilities.