Adform Site Tracking 1.1 allows attackers to inject HTML or execute arbitrary code via cookie hijacking.