Microsoft Management Console Bugs Allow Windows Takeover

Multiple cross-site scripting (XSS) bugs and an XML external entity (XXE) problem opens the door to takeover of admin desktops.