Attachmate has acknowledged multiple vulnerabilities in Attachmate Reflection for the Web, which can be exploited by malicious users to disclose certain information and by malicious people to disclose potentially sensitive information, hijack a user's session, conduct DNS cache poisoning attacks, manipulate certain data, cause a DoS (Denial of Service), and compromise a vulnerable system.

For more information:
SA46512

The vulnerabilities are reported in versions prior to Reflection for the Web 2011 R1 Build 527.

Solution
Update to Reflection for the Web 2011 R1 Build 527.
Original Advisory
http://support.attachmate.com/techdocs/1704.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers