htmls guest gear (all pages that look like this http://htmlgear.tripod.com/guest/control.guest?a=sign) has an exploit where you can inject html and javascript into there guestbook by doing the following =0D 
=0D

>
=0D
=0D
you can put any html or javascript in there. you can find vunrable page by doing the following google search =0D
=0D
site:http://htmlgear.tripod.com/guest/control.guest?a=sign=0D 
=0D