some XSS (Cross Site Scripting) have just been found in common's spaw.If you use TinyD >= 2.0, update TinyD 2.15 please.Since XSS are inside common/ in this time, if you use hacked version of TinyD, just overwriting common/.