Enhanced Mitigation Experience Toolkit (EMET) suffers from an XML external entity injection vulnerability.