Xss is found in version 3.2.3 lenny(oldstable) has version 3.0.6-4~lenny2 lenny-backports has version 3.2.1-2~bpo50+1/3.2.0-5~bpo50+1 squeeze has version 3.2.1-2 all older non vulnerable versions. Regards, Martijn van Brummelen