FIBARO System Home Center version 5.021 suffers from cross site scripting and remote file inclusion vulnerabilities.