Software security firm Veracode released a new free service that is designed to enable Web site owners to scan their Java applets for XSS bugs. Site owners can upload their applets to the company s servers and the company will scan the application for existing XSS vulnerabilities. XSS has become a serious issue in Web applications on all different kinds of sites. The service is a small subset of the larger binary-analysis services that Veracodes performs on a paid basis. OWASP lists XSS as the number two application security risk in its 2010 Top 10 list.
Source: https://threatpost.com/free-service-targets-xss-bugs-java-apps-013111/74894/