Thanks - both fixed on this site. Unfortunately the instance of this bug relating to the Ajax-generated list of related questions is also in 1.4.x release code. It can be fixed in qa-ajax-asktitle.php by searching for:
.$question['title'].
... and replacing with ...
.qa_html($question['title']).
Thanks for catching this!