Multiple cross-site scripting (XSS) vulnerabilities in Cisco Linksys E4200 router with firmware 1.0.05 build 7 allow remote attackers to inject arbitrary web script or HTML via the (1) logtype, (2) pingip, (3) pingsize, (4) submittype, or (5) tracerouteip parameter to apply.cgi or (6) newworkgroup or (7) submitbutton parameter to storage/apply.cgi.