Vendor inquiries sent for CVE-2005-4285 (PDEstore XSS) and CVE-2005-4284 (StaticStore XSS), both r0t ventures. I've sent various others but am not great about forwarding them all to VIM. Vendor communications tracking is completely ad hoc. - Steve