A cross-domain policy file is an XML document that grants a web client�??such as Adobe Flash Player, Adobe Reader, etc.�??permission to handle data across multiple domains.
...
To access data from a different server other than the one hosting your Flex application, the remote server needs to have a cross-domain file in the root directory.
...
If this service is not running in the same web server, your ArcGIS Server will need a crossdomain.xml file.
...