website with suspected injection code

[steve.ledger]

Xara Web Designer doesn't use any Java (unless you have added some via placeholders etc?)