Corsaire published 3 security bulletins reporting multiple vulnerabilites found in ESX Server 2.x and leading to risk of hijacking, cross site scripting and exposure of sensitive informations:
- http://www.corsaire.com/advisories/c060512-001.txt
- http://www.corsaire.com/advisories/c051114-001.txt
- http://www.corsaire.com/advisories/c051114-003.txt
All vulnerabilities are already fixed with lastest version of the product: ESX Server 2.5.3 patch 2.