I think this will fix the problem LarE. If you edit scripts/checkrecipients.inc.php. At line 108, you'll see this:

$returnval = "<user>$User</user>";

Right before that, add this:

$User = htmlentities($User);