wpoison is a web application assessment tool. It searches for possible known security flaws on a given (remote) web document.