XSS in search results address and email fields

Steps to reproduce:

1. Create a new contact
2. Set Street Address = " onmouseover="alert('XSS');" x="
3. Perform a search in which the contact is displayed in the results
4. Hover over the street address and observe that js has been executed

The email field in the search results screen is affected as well, although it's more difficult to get the exploit into that field because of the input validation (though presumably possible).