Listado de Sitios Vulnerables a XSS...

Federal
Reserve Bank of New York
CompUSA
SBC
EPA
ABC News
BlockBuster (Injectar XSS en ¨movie search¨)
BizRate
CNET
Geico Insurance
Oracle
Cingular
Poetry.com
US Dept. Of State
Journal Sentinel
National
Institutes of Health
Federal Deposit Insurance Corporation
DHL (Injectar XSS dentro de ¨tracking search number¨)
Internet Movie Database Inc.
Washington Post
World Bank
CBS News
DrudgeReportArchives
D-Link
Nortel Networks
ThermalTake
M&T Bank

Fuente:hackers-news.com

salu2