iBilling version 3.7.0 suffers from multiple stored and reflective cross site scripting vulnerabilities.