The IPDiva Mediation server suffer of a lot of XSS vulnerability. simply vector as <script>alert("Tested by Ha.ckers.frTeam");</script> work for example...