Hi,
I am Omar KURT of Netsparker. We are developing an product called Netsparker that finds vulnerabilities in web applications like XSS.
During our tests against open source web applications, we are identified some security vulnerabilities in FishEye 3.3.3. If you are accept communication with that e-mail we will give you more information about these vulnerabilities. After vulnerabilities fixed, we will release an security advisory for this issue.
If you won't respond to this e-mail in 2 weeks, we will release advisory without waiting patch/workaround.
More info about Netsparker's advisories;
https://www.netsparker.com/netsparker-advisories/
Reference :
https://www.netsparker.com/critical-xss-vulnerabilities-in-tiki-wiki-cms/
http://seclists.org/bugtraq/2002/Dec/114
https://support.atlassian.com/browse/FSH-13841
Best Regards,
Omar