Look at this one:

http://share.ez.no/content/search/%28offset%29/50?SearchText=admin+classes&SubTreeArray=1

in the last search result we have a <select> tag which is not properly escaped. A dropdown is displayed and the page ends there.