The vodafone.de site suffers from multiple cross site scripting and HTML injection vulnerabilities. Continue reading...