The remote host is missing an update to simplesamlphp announced via advisory DSA 2387-1.

https://secure1.securityspace.com/smysecure/catid.html?in=DSA%202387-1

timtai1 discovered that simpleSAMLphp, an authentication and federation platform, is vulnerable to a cross site scripting attack, allowing a remote attacker to access sensitive client data. The oldstable distribution (lenny) does not contain a simplesamlphp package. For the stable distribution (squeeze), this problem has been fixed in version 1.6.3-3. For the unstable distribution (sid), this problem has been fixed in version 1.8.2-1. We recommend that you upgrade your simplesamlphp packages.