Vulnerabilities in MicrosoftAjax

Hi, 

We use Ajax Control Toolkit 4.1 in our application and when we run the HPFortify tool on our application it came up with the following vulnerabilities.

Code Injection - MicrosoftAjax.js _ensureHistory()

XSS DOM - MicrosoftAjax.js _setState()

Code Injection  - MicrosoftAjax.js setTimeout(0)

Could you suggest some ways to resolve these issues. 

Thanks.