We talked about a few possibilities over the phone, most promising is the iframe content being the source of the vulnerability, I also suggested contacting the host to have them run a Cross site scripting check
Your friends over here at WebAssist! These Dreamweaver extensions will assist you in building unlimited, custom websites.
These out-of-the-box solutions provide you proven, tested applications that can be up and running now. Build a store, a gallery, or a web-based email solution.