The always nice Stefano told me about another small XSS issue with contact form: replace the file contact.tpl you have in fp-interface/sharedtpls/ with this one
Guys I know you look forward Crescendo+1, I have to ask you to wait :)
bye!